Real-attack detection demo. Reproduces the March 2026 Trivy tag-rewrite and LiteLLM .pth credential-stealer playbooks, then shows cilock's three layers of defense blocking each one.
-
Updated
Mar 22, 2026 - Shell
Real-attack detection demo. Reproduces the March 2026 Trivy tag-rewrite and LiteLLM .pth credential-stealer playbooks, then shows cilock's three layers of defense blocking each one.
Catalog of real-world software supply-chain attacks reproduced as safe harnesses, each with cilock detection demonstrated by live CI. Trivy tag-rewrite, LiteLLM .pth stealer, Nx VS Code, actions-cool hijack, Shai-Hulud npm worm, Microsoft durabletask PyPI, GitHub source disclosure.
Add a description, image, and links to the secretscan topic page so that developers can more easily learn about it.
To associate your repository with the secretscan topic, visit your repo's landing page and select "manage topics."