🏭 Supply Chain - CWhiting · Scour

How Open Source Dependency and Repo Attacks Compromise DevOps Pipelines and How to Stay Safe 🔗Supply Chain Attacks

Picks, Shovels, and the Bill of Materials 🔗Technology Supply Chains

atomsfrontier.substack.com·2h·Substack

Win11 Zero-Days, npm Supply Chain, & AI Agent Security Threats 🛡️Exploit Mitigations

dev.to·1d·DEV

Mini Shai-Hulud worm hits npm supply chain, compromising 160+ packages via GitHub Actions cache poisoning 💥Exploit Dev

thecybersecguru.com·2d·r/Malware, r/Python, r/javascript, r/node

fsnotify Maintainer Dispute Sparks Supply Chain Concerns 📦Software Supply Chain

socket.dev·5d·Lobsters

Here's how the Iran war is hitting key supplies for components, according to supply chain experts 🔗Technology Supply Chains

·1d

Kettle: Attested Builds for Verifiable Software Provenance 🔒Protocol Verification

arxiv.org·2d·Hacker News, Hacker News

How I Built a QR-Powered ERP for Garment Factories Using React, Firebase, and a Raspberry Pi 🧵⚡ ⚙️Automation

scanerp.pro·5d·DEV

MLOps Maturity Assessment ⚙️LLMOps

mlops.community·1d

NetSuite Integration Guide 🔌API

dev.to·4d·DEV

robertnowell/marketing-pipeline: Problem-first automated marketing pipeline for open source projects. 🤖Anthropic Claude API

github.com·3d·DEV

Where DevOps Pipelines Break: Real Attack Paths in Cloud-Native CI/CD 🛠️DevOps

cloudnativenow.com·3d

The iam: PassRole Nightmare - 3 Weeks of My Life I Will Never Get Back ⚙️LLMOps

leanpub.com·3d·DEV

Popular Go Library fsnotify Raises Supply Chain Alarms After Maintainer Access Changes 🐛Bug Bounty

cybersecuritynews.com·3d·r/golang, r/programming

theoddden/Mandala: Event-sourced logistics integration for Samsara with Descartes/Cargowise/Vizion 📦Software Supply Chain

github.com·5d·Hacker News

Designing Resilient Shopify Middleware 📦Software Supply Chain

kolachitech.com·5d·DEV

Supply chain npm vs PyPI: I compared both simulations and the most dangerous vector isn't what everyone thinks 📦Software Supply Chain

dev.to·6d·DEV

My Agentic Trust Issues: From Prompt Injection to Supply-Chain Compromise on gemini-cli 🐛Bug Bounty

pillar.security·5d·Lobsters

The Resilience & Observability Stack 👁️System Observability

dev.to·3d·DEV

GitHub Merge Queue Incident: A Wake-Up Call for How to Measure Developer Productivity 🤖AI Codegen

dev.to·4d·DEV

No more posts from CWhiting's subscribed feeds.

Scour all 25695 feeds Learn more about Feeds

Log in to enable infinite scrolling