🔐 Supply Chain Security - buckman · Scour

Signing Container Images with Cosign

🔐OAuth 2.0 Blog

Securing CI/CD for an open source project: Controlling who runs what

🐙GitHub Blog

Spring is 23 years old. AI just made it a security emergency.

thenewstack.io·

Config Files That Run Code: Supply Chain Security Blindspot

📦Package Managers

safedep.io··Hacker News

Resurfaced Vulnerabilities, Weaponized Workflows, and Exposed Operations Define the Week

🔓Vulnerability Research Blog

Two-Thirds of Open Source Community Unaware of Cyber Resilience Act

🔒Security News

infosecurity-magazine.com·

SOC 2 Controls for Non-Human Identities: CC6, CC7, and CC8

🚨Incident Response Blog

goteleport.com·

End-to-End GitHub Security Hardening Guide for Organizations

🐙GitHub Blog

RFC: pluggable publisher verification as a trust tier for community skills · Issue #40555 · NousResearch/hermes-agent

📡Network Protocol Design Discussion Code

github.com··DEV

For the 2nd time in weeks, Microsoft packages laced with credential stealer

🔐Infosec News

arstechnica.com··Lobsters, Hacker News

Innovation as resilience: Demand-side strategies for critical mineral supply chain security

⛏️Critical Minerals

atlanticcouncil.org·

Microsoft's npm Packages Got Backdoored. Again. And AI Agents Pulled the Trigger.

💻WMI Abuse Blog

Rebuilding a HIPAA CI/CD pipeline: signed promotion, OPA admission, and audit-grade evidence

⚙️DevOps Practices Blog

Docker Security Dispatch — Issue 2: From JCON to Zurich 🏔️

📦Containerization Blog

.NET NuGet Package Security — How to Scan Your C# Dependencies for Vulnerabilities

📦Package Managers Blog

The Maintainer Trap: What the jqwik Incident Reveals About Trusting Your Dependencies

🌐Open Source Blog

Developers Are Now the Attack Surface

🐙GitHub Blog

Building a Multi-Agent Security Framework for Kubernetes: Autonomous Detection, Investigation, and Remediation

💻WMI Abuse Blog

llm-cli-gateway 2.0.0: the quiet supply-chain release that matters

🗄️Databases Blog

Rust Was Crashing. Go Fixed It. Copilot Showed Me Why

📦Dependency Confusion Blog

No more posts from buckman's subscribed feeds.

Scour all 25255 feeds Learn more about Feeds

Log in to enable infinite scrolling