Widely used Trivy scanner compromised in ongoing supply-chain attack