Story thread · 5 reports / 5 sources
Disrupting supply chain attacks on NPM and GitHub Actions
news.ycombinator.com · 13d
Article URL: https://github.blog/security/supply-chain-security/disrupting-supply-chain-attacks-on-npm-and-github-actions/ Comments URL: https://news.ycombinator.com/item?id=49096427 Points: 9 # Comments: 2
First report: GitHub, PyPI add time-absed defenses against supply chain attacks — bleepingcomputer.com, 16d
The coverage
- New GitHub, PyPI Policies Boost Supply Chain Security
securityweek.com · 15d
- Supply chain security: GitHub Dependabot delays package updates by three days
heise.de · 15d
The conversation · 0
Sign in to join the conversation.
No comments yet — start the thread.