DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your WordPress Dashboard Will Never Warn You About These SAML Forgery Bugs
secbyjasonmiller profile

Your WordPress Dashboard Will Never Warn You About These SAML Forgery Bugs

#apiauth #supplychain #secrets
Comments
3 min read
The GNU strip backdoor is the case AI code review can't see
cole_halton_42f71d71b809b profile

The GNU strip backdoor is the case AI code review can't see

#aicodereview #supplychain #security
Comments
2 min read
The fix shipped three weeks before the bug had a name
mosiddi profile

The fix shipped three weeks before the bug had a name

#agentsecurity #supplychain #codingagents
Comments
4 min read
Your Vendor's Security Is Now Your Security
serguey_shinder_4ab9b87b1 profile

Your Vendor's Security Is Now Your Security

#sergueyshinder #security #infosec #supplychain
Comments
2 min read
Quando 1.200 agenti “isolati” trovano un modo per parlarsi: la lezione più scomoda per le sandbox moderne
frontendfacile profile

Quando 1.200 agenti “isolati” trovano un modo per parlarsi: la lezione più scomoda per le sandbox moderne

#sandboxing #supplychain #packageregistry #aiagents
Comments
4 min read
Valid provenance is not valid code: a supply-chain worm shipped with a valid SLSA attestation
correctover profile

Valid provenance is not valid code: a supply-chain worm shipped with a valid SLSA attestation

#security #supplychain #ai #github
Comments
5 min read
Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%
hamelin123 profile

Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%

#docker #security #devsecops #supplychain
Comments
3 min read
A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation
ramdai_bista profile

A Supply-Chain Worm Wrote Itself Into Claude Code's Hook Files to Survive Credential Rotation

#claudecode #security #supplychain #npm
Comments
2 min read
The Source Is Closed. Here's How You Can Still Trust the Supply Chain.
spidgorny profile

The Source Is Closed. Here's How You Can Still Trust the Supply Chain.

#security #supplychain #snyk
Comments
5 min read
Why Your Base Image Has 1,684 CVEs
devopsdaily profile

Why Your Base Image Has 1,684 CVEs

#docker #security #containers #supplychain
Comments
16 min read
What Is JINGDONG Logistics and How Does JD Logistics Use AI in Supply Chain Management?
lyee_blair_a5996ecaf9cd2b profile

What Is JINGDONG Logistics and How Does JD Logistics Use AI in Supply Chain Management?

#ai #automation #supplychain #robotics
Comments
5 min read
npm provenance attestations get worn as camouflage in a new worm-style attack
leobaniak profile
Leo

npm provenance attestations get worn as camouflage in a new worm-style attack

#npm #supplychain #provenance #attestations
Comments
5 min read
Fear Is the Mind-Killer. Dependencies Are the Build-Killer
avlcodemonkey profile

Fear Is the Mind-Killer. Dependencies Are the Build-Killer

#dependencies #supplychain #security #featureflags
Comments
2 min read
A shared agent-plugin format is a shared supply chain
leobaniak profile
Leo

A shared agent-plugin format is a shared supply chain

#agentplugins #standards #supplychain #aiagents
Comments 1
3 min read
Your Coding Agent Has a Supply Chain, and You Probably Have Not Scoped It
_firelinks profile

Your Coding Agent Has a Supply Chain, and You Probably Have Not Scoped It

#security #devops #supplychain #ai
Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.