Comment by philipwhiuk

Sounds like Trivy is still compromised:

https://www.aquasec.com/blog/trivy-supply-chain-attack-what-...