Tag

Software-Supply-Chain

3 Thoughts filed under this subject.

  1. A Short-Lived Token Can Still Have a Large Blast Radius
  1. A Lockfile Gives Repeatability, Not Provenance
  2. Supply-Chain Security Begins with Who Can Change the Artifact