Investigating the Trivy Supply Chain Compromise with AI Agents

How I used AI-assisted investigation to triage the trivy-action supply chain attack across my homelab repos — and some thoughts on weekend incident response and community notification gaps.