supply-chain 7
- public registries are not your supply-chain strategy
- hardened images are becoming the default base layer
- VEX turns container scanning into queue discipline
- Watch out - that recruiter profile might be a scam. Check here first.
- How to safely inspect a repository before running anything on your machine
- Watch out, your recruiter might be a scam
- The LiteLLM Supply Chain Attack — What AI-Dependent Codebases Should Audit