John Speed Meyers
Former Lead ResearcherChainguard
Written by John Speed Meyers
Hunting malware on package repositories
Forschung
What’s software supply chain security got to do with the State of DevOps Report? A Lot.
NachrichtSigstore for CISOs
SicherheitDo the dependency trees of widely used packages grow?
Forschung
The security costs of base image version loitering
SicherheitThe Dirty Secret of Cybersecurity Standards
SicherheitSLSA vs. Software Supply Chain Attacks
SicherheitHow to make package signing useful
Maschinenbau