#packageregistrysecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #packageregistrysecurity, aggregated by home.social.
-
The Spice Must Flow (Through a Trust Boundary)
Supply chain attacks like npm's Shai-Hulud campaign exploited CI/CD credentials, not cryptography — here's why OIDC and provenance attestation actually fix it. -
The Spice Must Flow (Through a Trust Boundary)
Supply chain attacks like npm's Shai-Hulud campaign exploited CI/CD credentials, not cryptography — here's why OIDC and provenance attestation actually fix it. -
The Spice Must Flow (Through a Trust Boundary)
Supply chain attacks like npm's Shai-Hulud campaign exploited CI/CD credentials, not cryptography — here's why OIDC and provenance attestation actually fix it.