Supplychain

👋 Sign in for the ability to sort posts by relevant, latest, or top.

jeffrey

Oct 6

1,316,357 GitLab Matches and 456,436 Title Matches: Sizing a Self-Managed Code Host

#security #exposuremanagement #supplychain

3 min read

Ahmet Zeybek

Oct 6

The npm worm playbook for a small team

#security #npm #supplychain #ci

6 min read

relayshieldadmin

Oct 6

ChainDrop Had Valid Provenance. That Was Not Enough.

#supplychain #security #npm #opensource

2 min read

jeffrey

Oct 6

1538 Jenkins, 169 Harbor and 32 SonarQube Results: The Build Chain Has a Public Address

#zoomeye #supplychain #cicd #jenkins

4 min read

jj1423

Oct 5

Beyond the package name: why following the call is the hard part of supply-chain security

#vulnerabilities #security #supplychain #ai

3 min read

Anthony Garces

Oct 5

What Ed25519 Signing Actually Proves About a Test Result

#evidence #signing #supplychain

6 min read

OnaEiuspkz

Oct 5

oc-mirror CVE-2026-75939: A Signature Check That Runs in the Wrong Order

#openshift #supplychain #pgp #disconnected

2 min read

OnaEiuspkz

Oct 4

Nexus Repository Manager: 81,550 title matches and 33,844 fingerprints on the artefact pipeline everything depends on

#exposure #supplychain

2 min read

Edison Flores

Oct 3

Three merged PRs in an MCP security scanner: the review that found my bug, and two more

#mcp #security #supplychain #python

4 min read

kozhevniko

Oct 3

Container Image Provenance: Signing Is Half the Control

#security #containers #supplychain

2 min read

NTCTech

Oct 2

Rotating Credentials Is Not Revoking Them. The Revocation Unit Decides Whether You Can.

#security #devops #architecture #supplychain

8 min read

kozhevniko

Oct 1

Two Flaws, One Chain: How JFrog Artifactory Was Pushed to Admin

#security #jfrog #artifactory #supplychain

4 min read

OnaEiuspkz

Oct 1

CVE-2026-60004: code injection through the Gitea diffpatch API, and why a forge holds everything

#gitea #supplychain #codeinjection

2 min read

DevOps Daily

Oct 1

GitHub Actions Removed Node 20. Find Every node20 Action You Still Run

#cicd #githubactions #node #supplychain

14 min read

jeffrey

Oct 1

Browser extensions are an enterprise control problem, not a user hygiene problem

#browsersecurity #extensionmanagement #enterprisepolicy #supplychain

4 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.