Trivy, KICS, and the shape of supply chain attacks so far in 2026 | Endigest