Software Supply Chain: Bigger (and Scarier) Than We Realize

When we talk about the software supply chain security, most people think only of dependencies (open-source libraries and frameworks). But the supply chain is so much more than just that. It’s everything we use to build, test, and release our software: our IDE (and all those wonderful extensions), our CI/CD pipelines (including every script, config,… Continue reading Software Supply Chain: Bigger…