Supplychainsecurity

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Jesse Houwing

Dec 27 '25

Improved Dependency Submission for GitHub Actions

#githubactions #github #supplychainsecurity #security

3 min read

Youssef Khouidi

Nov 29 '25

NPM = Wild Wild West: It's Time to Stop the Madness

#supplychainsecurity #javascript #opensource #npm

3 min read

SnykSec for Snyk

Nov 25 '25

SHA1-Hulud, npm supply chain incident

#supplychainsecurity #vulnerabilityinsights

3 min read

SnykSec for Snyk

Sep 17 '25

Embedded Malicious Code in tinycolor and ngx-bootstrap releases on npm

#supplychainsecurity

6 min read

Dmitry Protsenko

Aug 15 '25

Using SBOMs to detect possible Dependency Confusion

#cybersecurity #supplychainsecurity #dependencyconfusion #webdev

4 min read

Savinda

May 16 '25

Behind the Code: A Simple Look at the Software Supply Chain

#beginners #supplychainsecurity #devops #cybersecurity

2 min read

SnykSec for Snyk

Dec 12 '24

Ultralytics AI Pwn Request Supply Chain Attack

#codesecurity #devsecops #opensourcesecurity #supplychainsecurity

7 min read

SnykSec for Snyk

Oct 4 '24

The mysterious supply chain concern of string-width-cjs npm package

#opensourcesecurity #supplychainsecurity #javascript #node

7 min read

Richard Fan for AWS Community Builders

Mar 3 '24

What You See is What You Get - Building a Verifiable Enclave Image

#aws #nitroenclaves #sigstore #supplychainsecurity

7 min read

Craig McLuckie

Apr 2 '24

The good, the bad and the ugly of the XZ vulnerability (CVE 2024-3094)

#security #supplychainsecurity #xz #cybersecurity

6 min read

Jesse Houwing for Xebia Microsoft Services

Sep 14 '23

Protect the repository hosting your GitHub Action

#githubactions #github #security #supplychainsecurity

7 min read

SnykSec for Snyk

Jul 13 '23

How to strengthen security in your CI/CD pipeline

#supplychainsecurity #applicationsecurity #devsecops #cicd

8 min read

SnykSec for Snyk

Aug 11 '23

CodeSecDays conference and more complete security coverage with GitGuardian

#supplychainsecurity #cicd

4 min read

Brianna Blacet for Outshift By Cisco

Jun 7 '23

Securing the Software Supply Chain: The Struggle Is (Still) Real

#opensource #sbom #supplychainsecurity

6 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# supplychainsecurity

Improved Dependency Submission for GitHub Actions

NPM = Wild Wild West: It's Time to Stop the Madness

SHA1-Hulud, npm supply chain incident

Embedded Malicious Code in tinycolor and ngx-bootstrap releases on npm

Using SBOMs to detect possible Dependency Confusion

Behind the Code: A Simple Look at the Software Supply Chain

Ultralytics AI Pwn Request Supply Chain Attack

The mysterious supply chain concern of string-width-cjs npm package

What You See is What You Get - Building a Verifiable Enclave Image

The good, the bad and the ugly of the XZ vulnerability (CVE 2024-3094)

Protect the repository hosting your GitHub Action

How to strengthen security in your CI/CD pipeline

CodeSecDays conference and more complete security coverage with GitGuardian

Securing the Software Supply Chain: The Struggle Is (Still) Real