DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Git submodules carry a second repository trust decision

Git submodules carry a second repository trust decision

Comments 1
3 min read
A Terraform provider lock file is a checksum contract

A Terraform provider lock file is a checksum contract

Comments
3 min read
Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First

Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First

Comments
7 min read
Our Suppliers' Barcodes Will Soon Carry the Batch Number and Our Stock System Has Nowhere to Put It

Our Suppliers' Barcodes Will Soon Carry the Batch Number and Our Stock System Has Nowhere to Put It

Comments
2 min read
What a stable LiteLLM baseline should show after the 1.107.0 cleanup

What a stable LiteLLM baseline should show after the 1.107.0 cleanup

Comments
4 min read
TUF rollback and freeze defenses depend on trusted client state

TUF rollback and freeze defenses depend on trusted client state

Comments
3 min read
How artificial intelligence skyrocketed memory prices and changed Apple's position

How artificial intelligence skyrocketed memory prices and changed Apple's position

Comments
2 min read
GitHub Actions Supply-Chain Risk: 57% of Workflows in Our Scan Used Non-SHA Refs

GitHub Actions Supply-Chain Risk: 57% of Workflows in Our Scan Used Non-SHA Refs

Comments
3 min read
Your Editor Is an Attack Surface: A Practical Guide to Auditing VS Code and Cursor Extensions

Your Editor Is an Attack Surface: A Practical Guide to Auditing VS Code and Cursor Extensions

1
Comments 1
7 min read
The EDI 943, Decoded: A Stock Transfer Shipment Advice Is Inventory Telling the Next Warehouse It Is Coming

The EDI 943, Decoded: A Stock Transfer Shipment Advice Is Inventory Telling the Next Warehouse It Is Coming

Comments
5 min read
Cursor Marketplace vs. Official Claude Code: What Version 2.1.313 Reveals

Cursor Marketplace vs. Official Claude Code: What Version 2.1.313 Reveals

1
Comments 1
6 min read
Container tags move; digests should decide what runs

Container tags move; digests should decide what runs

Comments
3 min read
Rotating a signing key without breaking self-update

Rotating a signing key without breaking self-update

Comments
8 min read
TUF Protects Updates Only When Clients Enforce Its State

TUF Protects Updates Only When Clients Enforce Its State

Comments
3 min read
Insiden LiteLLM 1.107.0: Cara Mengunci Dependency agar Tidak Terkena Paket Beracun

Insiden LiteLLM 1.107.0: Cara Mengunci Dependency agar Tidak Terkena Paket Beracun

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.