Tag

Security

4 Thoughts filed under this subject.

  1. Repository Evidence Is Not an Instruction
  2. A Short-Lived Token Can Still Have a Large Blast Radius
  1. A Lockfile Gives Repeatability, Not Provenance
  2. Supply-Chain Security Begins with Who Can Change the Artifact