# Sbomify-Action articles

## Pages

- [Trivy Compromise: How We Are Hardening sbomify-action](https://sbomify.com/2026/03/26/trivy-compromise-hardening-sbomify-action/) (2026-03-26): Aqua Security's Trivy was compromised twice in two weeks. Here is how we audited and hardened sbomify-action in response, and why we are moving to short-lived OIDC tokens.

---

From sbomify: https://sbomify.com/tags/sbomify-action/