CVE-2026-33634 Trivy供应链攻击漏洞

#!/bin/bash # PoC: Check for indicators of CVE-2026-33634 compromise in the environment # This script checks for the malicious version tag and the fallback repository. echo "Checking for CVE-2026-33634 Indicators of Compromise..." # 1. Check for malicious Trivy version in usage if grep -r "aquasecurity/trivy-action" .github/workflows/ 2>/dev/null | grep -E "@v(0\.[0-2]\.|0\.3[0-4]\.|0\.69\.4)"; then echo "[ALERT] Potentially vulnerable trivy-action version reference found in workflows." fi # 2. Check for malicious setup-trivy version if grep -r "aquasecurity/setup-trivy" .github/workflows/ 2>/dev/null | grep -E "@v0\.2\.[0-6]"; then echo "[ALERT] Potentially vulnerable setup-trivy version reference found." fi # 3. Check for fallback exfiltration repository 'tpcp-docs' if gh repo list 2>/dev/null | grep -q "tpcp-docs"; then echo "[CRITICAL] Fallback exfiltration repository 'tpcp-docs' detected!" fi echo "Check complete."