Explore >> Select a destination

You are here

 blog.yossarian.net
We should all be using dependency cooldowns
| | openssf.org
Alpha-Omega Grant To Help Homebrew Reach SLSA Build Level 2 - Open Source Security Foundation
3.7 parsecs away

Travel
| | [AI summary] The Alpha-Omega grant aims to enhance Homebrew's security by implementing Sigstore attestations and SLSA Build Level 2 to ensure secure software supply chains.
| | thehackernews.com
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets
3.7 parsecs away

Travel
| | Shai-Hulud v2 breached npm and Maven, impacting 28,000+ repos and leaking 11,858 secrets.
| | www.evasec.io
Vulnerabilities in CocoaPods Open the Door to Supply Chain Attacks Against Thousands of iOS and MacOS Applications
3.6 parsecs away

Travel
| | Multiple vulnerabilities affecting the CocoaPods ecosystem, have been discovered, posing a major risk of supply chain attacks.
| | openchainproject.org
LINE Announces An OpenChain ISO/IEC 5230 Program for Open Source Compliance - OpenChain
11.3 parsecs away

Travel
| LINE Corporation is pleased to announce that it has achieved OpenChain ISO/IEC 5230 self-certification, the international standard for open source license compliance. The OpenChain Project is one of the initiatives...