How the Trivy supply chain attack harvested credentials from secrets managers