Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...

The diff command that compares files is unaware of key columns (like primary keys in a database). Therefore, it may give undesired results in detecting differences in CSV files that have key columns.