John Speed Meyers
Former Lead ResearcherChainguard
Written by John Speed Meyers
Hunting malware on package repositories
recherche
What’s software supply chain security got to do with the State of DevOps Report? A Lot.
nouvellesSigstore for CISOs
sécuritéDo the dependency trees of widely used packages grow?
recherche
The security costs of base image version loitering
sécuritéThe Dirty Secret of Cybersecurity Standards
sécuritéSLSA vs. Software Supply Chain Attacks
sécuritéHow to make package signing useful
ingénierie