home.social

#mfapublishing — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #mfapublishing, aggregated by home.social.

fetched live
  1. The Spice Must Flow (Through a Trust Boundary)

    Supply chain attacks like npm's Shai-Hulud campaign exploited CI/CD credentials, not cryptography — here's why OIDC and provenance attestation actually fix it.

    islandinthenet.com/the-spice-m