docker-socket-risk-demos

docker-socket-risk-demos 영상의 동반 저장소: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI 이 저장소에는 영상에서 사용된 샘플 웹 앱과 Claude Code 프롬프트가 포함되어 있으며, 다음을 시연합니다: 1. /var/run/docker.sock을 컨테이너에 마운트하면 해당 컨테이너가 호스트에 대한...

trivysupplychainanalysis

Quantitative Analysis of Multi-Stage CI/CD Supply-Chain Attacks A formally verified, quantitative reconstruction of the March-2026 Trivy / "TeamPCP" GitHub Actions supply-chain compromise CVE-2026-33634 — modeled in TLA+, checked exhaustively with TLC, and quantified with the PRISM probabilistic...

Exploit for Embedded Malicious Code in Aquasec Setup-Trivy

CVE-2026-33634-Scanner !License: MIThttps://img.shields.i...

CVE-2026-33634

creationtimestamp| type| source ---|---|--- 2026-03-23 22:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5vaikg22i 2026-03-24 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116281208959546737 2026-03-24 00:00:42+00:00| seen|...