John Speed Meyers
Former Lead ResearcherChainguard
Written by John Speed Meyers
Hunting malware on package repositories
research
What’s software supply chain security got to do with the State of DevOps Report? A Lot.
newsSigstore for CISOs
securityDo the dependency trees of widely used packages grow?
research
The security costs of base image version loitering
securityThe Dirty Secret of Cybersecurity Standards
securitySLSA vs. Software Supply Chain Attacks
securityHow to make package signing useful
engineering