DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Field report: 17381 real pull requests scanned, 10% flagged, 46 of our own mistakes fixed in public

Field report: 17381 real pull requests scanned, 10% flagged, 46 of our own mistakes fixed in public

Comments
2 min read
Nix store signatures cover substitution trust, not every build input

Nix store signatures cover substitution trust, not every build input

Comments
2 min read
Git submodules carry a second repository trust decision

Git submodules carry a second repository trust decision

Comments 1
3 min read
Pre-Shipment Inspections for Small Brands: What to Check Before You Pay the Balance

Pre-Shipment Inspections for Small Brands: What to Check Before You Pay the Balance

Comments
2 min read
A Terraform provider lock file is a checksum contract

A Terraform provider lock file is a checksum contract

Comments
3 min read
Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First

Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First

Comments
7 min read
Our Suppliers' Barcodes Will Soon Carry the Batch Number and Our Stock System Has Nowhere to Put It

Our Suppliers' Barcodes Will Soon Carry the Batch Number and Our Stock System Has Nowhere to Put It

Comments
2 min read
What a stable LiteLLM baseline should show after the 1.107.0 cleanup

What a stable LiteLLM baseline should show after the 1.107.0 cleanup

Comments
4 min read
TUF rollback and freeze defenses depend on trusted client state

TUF rollback and freeze defenses depend on trusted client state

Comments
3 min read
How artificial intelligence skyrocketed memory prices and changed Apple's position

How artificial intelligence skyrocketed memory prices and changed Apple's position

Comments
2 min read
GitHub Actions Supply-Chain Risk: 57% of Workflows in Our Scan Used Non-SHA Refs

GitHub Actions Supply-Chain Risk: 57% of Workflows in Our Scan Used Non-SHA Refs

Comments
3 min read
Your Editor Is an Attack Surface: A Practical Guide to Auditing VS Code and Cursor Extensions

Your Editor Is an Attack Surface: A Practical Guide to Auditing VS Code and Cursor Extensions

1
Comments 1
7 min read
The EDI 943, Decoded: A Stock Transfer Shipment Advice Is Inventory Telling the Next Warehouse It Is Coming

The EDI 943, Decoded: A Stock Transfer Shipment Advice Is Inventory Telling the Next Warehouse It Is Coming

Comments
5 min read
Cursor Marketplace vs. Official Claude Code: What Version 2.1.313 Reveals

Cursor Marketplace vs. Official Claude Code: What Version 2.1.313 Reveals

1
Comments 1
6 min read
Container tags move; digests should decide what runs

Container tags move; digests should decide what runs

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.