Supplychainsecurity - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Leo

Jul 30

OpenAI open-sources the Codex Security CLI and keeps the scanner in-house

#openai #codex #supplychainsecurity #codescanning

4 min read

Leo

Jul 29

Docker's fourth horror story revisits the Nx post-install hook that drained CI secrets

#supplychainsecurity #npm #postinstallhooks #cirunners

3 min read

Leo

Jul 28

GitHub Actions freezes suspected-malicious workflow runs until a human signs off

#githubactions #supplychainsecurity #workflowapproval #cicdsecurity

4 min read

Induwara Ashinsana

Jul 24

Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

#supplychainsecurity #dependabot #npm

4 min read

Leo

Jul 24

FakeGit floods GitHub with malicious repos aimed at coding agents

#supplychainsecurity #codingagents #github #malware

2 min read

Leo

Jul 22

The npm worm that shipped with valid SLSA provenance

#supplychainsecurity #slsa #provenance #npm

4 min read

Leo

Jul 3

The Codecov bash uploader is five years old, and the class of attack still lives in your pipeline

#supplychainsecurity #codecov #cisecrets #bashuploader

3 min read

Uhltak Therestismysecret

Jul 2

Supply Chain Attacks verstehen: Praxisnahe Schutzstrategien für moderne IT-Infrastrukturen

#supplychainsecurity #softwaredependencies #cybersecurity #devsecops

6 min read

Maksim Danilchenko

Jun 29

Perplexity Bumblebee Review: The Supply Chain Scanner Your Dev Machine Needs

#bumblebee #perplexity #supplychainsecurity #go

11 min read

eyanpen

Jun 29

Design Trade-offs: Why Hermes (and Many Popular Agents) Don't Use LangChain / LangGraph

#agentloop #langchain #langgraph #supplychainsecurity

8 min read

DarkEdges

Jun 28

Building CIS-Hardened, SBOM-Attested CentOS 9 Golden Images with Packer, QEMU and PingAccess - entirely on WSL2

#devsecops #packer #supplychainsecurity #linux

6 min read

The Cyber Sidekick

Jun 17

The Atomic Arch Supply Chain Attack: What 1,500 Compromised AUR Packages Mean for Cloud-Native CI/CD Security

#supplychainsecurity #containersecurity #archlinux #sbom

4 min read

Jun 11

Miasma Worm: How Opening a Repo in Claude Code Became a Credential Theft Vector

#security #supplychainsecurity #claudecode #devsecops

9 min read

Jun 9

The Gemini CLI CVSS 10 Attack: How a GitHub Issue Became a Supply Chain Weapon

#security #promptinjection #supplychainsecurity #devsecops

6 min read

Uhltak Therestismysecret

Jun 4

Supply Chain Attacks: Schutz vor bösartigen Abhängigkeiten im IT-Betrieb

#supplychainsecurity #abhaengigkeiten #devsecops #softwaresupplychain

5 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.