DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%
hamelin123 profile

Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%

#docker #security #devsecops #supplychain
Comments
3 min read
A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation
ramdai_bista profile

A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation

#claudecode #security #supplychain #npm
Comments
2 min read
The Source Is Closed. Here's How You Can Still Trust the Supply Chain.
spidgorny profile

The Source Is Closed. Here's How You Can Still Trust the Supply Chain.

#security #supplychain #snyk
Comments
5 min read
Why Your Base Image Has 1,684 CVEs
devopsdaily profile

Why Your Base Image Has 1,684 CVEs

#docker #security #containers #supplychain
Comments
16 min read
What Is JINGDONG Logistics and How Does JD Logistics Use AI in Supply Chain Management?
lyee_blair_a5996ecaf9cd2b profile

What Is JINGDONG Logistics and How Does JD Logistics Use AI in Supply Chain Management?

#ai #automation #supplychain #robotics
Comments
5 min read
npm provenance attestations get worn as camouflage in a new worm-style attack
leobaniak profile
Leo

npm provenance attestations get worn as camouflage in a new worm-style attack

#npm #supplychain #provenance #attestations
Comments
5 min read
Fear Is the Mind-Killer. Dependencies Are the Build-Killer
avlcodemonkey profile

Fear Is the Mind-Killer. Dependencies Are the Build-Killer

#dependencies #supplychain #security #featureflags
Comments
2 min read
A shared agent-plugin format is a shared supply chain
leobaniak profile
Leo

A shared agent-plugin format is a shared supply chain

#agentplugins #standards #supplychain #aiagents
Comments 1
3 min read
Your Coding Agent Has a Supply Chain, and You Probably Have Not Scoped It
_firelinks profile

Your Coding Agent Has a Supply Chain, and You Probably Have Not Scoped It

#security #devops #supplychain #ai
Comments
8 min read
RapidFort points its hardened open-source business at what actually runs in production
leobaniak profile
Leo

RapidFort points its hardened open-source business at what actually runs in production

#runtimesecurity #supplychain #opensource #monitoring
1
Comments
2 min read
CodeQL 2.26.2 trims what counts as safe: fresh alerts incoming
leobaniak profile
Leo

CodeQL 2.26.2 trims what counts as safe: fresh alerts incoming

#codeql #githubactions #sast #supplychain
1
Comments
3 min read
The 72-hour dependency cooldown is security theater that breaks your builds
adioof profile

The 72-hour dependency cooldown is security theater that breaks your builds

#security #devops #supplychain #dependencies
3
Comments 2
3 min read
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI
dwayne_mcdaniel profile

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

#security #supplychain #npm #python
Comments
7 min read
Stop Slopsquatting With a CI Gate, Not a Better Prompt
jaryn_123 profile

Stop Slopsquatting With a CI Gate, Not a Better Prompt

#security #ai #supplychain #devsecops
Comments
4 min read
Image verification, one layer below admission
leobaniak profile
Leo

Image verification, one layer below admission

#kubernetes #supplychain #policy #attestations
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.