afaik the trivy attack was first in the news on March 19th for the github actions and for docker images it was on March 23rd