Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
supplychain
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Git submodules carry a second repository trust decision
jeffrey
jeffrey
jeffrey
Follow
Nov 2
Git submodules carry a second repository trust decision
#
git
#
submodules
#
supplychain
Comments
1
 comment
3 min read
Moderation
A Terraform provider lock file is a checksum contract
facilishz
facilishz
facilishz
Follow
Nov 2
A Terraform provider lock file is a checksum contract
#
terraform
#
providers
#
supplychain
Comments
Add Comment
3 min read
Moderation
Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First
EME GUG
EME GUG
EME GUG
Follow
Nov 1
Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First
#
security
#
python
#
supplychain
#
ai
Comments
Add Comment
7 min read
Moderation
Our Suppliers' Barcodes Will Soon Carry the Batch Number and Our Stock System Has Nowhere to Put It
Serguey Shinder
Serguey Shinder
Serguey Shinder
Follow
Nov 1
Our Suppliers' Barcodes Will Soon Carry the Batch Number and Our Stock System Has Nowhere to Put It
#
sergueyshinder
#
futureofit
#
barcodes
#
supplychain
Comments
Add Comment
2 min read
Moderation
What a stable LiteLLM baseline should show after the 1.107.0 cleanup
yutianle
yutianle
yutianle
Follow
Nov 1
What a stable LiteLLM baseline should show after the 1.107.0 cleanup
#
zoomeye
#
litellm
#
supplychain
#
continuousmonitoring
Comments
Add Comment
4 min read
Moderation
TUF rollback and freeze defenses depend on trusted client state
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Nov 1
TUF rollback and freeze defenses depend on trusted client state
#
security
#
supplychain
#
tuf
Comments
Add Comment
3 min read
Moderation
How artificial intelligence skyrocketed memory prices and changed Apple's position
Hacks.gr
Hacks.gr
Hacks.gr
Follow
Nov 1
How artificial intelligence skyrocketed memory prices and changed Apple's position
#
apple
#
hardware
#
memory
#
supplychain
Comments
Add Comment
2 min read
Moderation
GitHub Actions Supply-Chain Risk: 57% of Workflows in Our Scan Used Non-SHA Refs
Alexis Román
Alexis Román
Alexis Román
Follow
Oct 31
GitHub Actions Supply-Chain Risk: 57% of Workflows in Our Scan Used Non-SHA Refs
#
ai
#
security
#
supplychain
#
githubactions
Comments
Add Comment
3 min read
Moderation
Your Editor Is an Attack Surface: A Practical Guide to Auditing VS Code and Cursor Extensions
EME GUG
EME GUG
EME GUG
Follow
Oct 31
Your Editor Is an Attack Surface: A Practical Guide to Auditing VS Code and Cursor Extensions
#
security
#
vscode
#
supplychain
#
devops
1
 reaction
Comments
1
 comment
7 min read
Moderation
The EDI 943, Decoded: A Stock Transfer Shipment Advice Is Inventory Telling the Next Warehouse It Is Coming
challan116-ux
challan116-ux
challan116-ux
Follow
Oct 30
The EDI 943, Decoded: A Stock Transfer Shipment Advice Is Inventory Telling the Next Warehouse It Is Coming
#
edi
#
api
#
integration
#
supplychain
Comments
Add Comment
5 min read
Moderation
Cursor Marketplace vs. Official Claude Code: What Version 2.1.313 Reveals
jamilxt
jamilxt
jamilxt
Follow
Oct 30
Cursor Marketplace vs. Official Claude Code: What Version 2.1.313 Reveals
#
ai
#
security
#
developers
#
supplychain
1
 reaction
Comments
1
 comment
6 min read
Moderation
Container tags move; digests should decide what runs
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 30
Container tags move; digests should decide what runs
#
containers
#
supplychain
#
oci
Comments
Add Comment
3 min read
Moderation
Rotating a signing key without breaking self-update
Matt Cockayne
Matt Cockayne
Matt Cockayne
Follow
Oct 30
Rotating a signing key without breaking self-update
#
security
#
tutorial
#
signing
#
supplychain
Comments
Add Comment
8 min read
Moderation
TUF Protects Updates Only When Clients Enforce Its State
StarkMan
StarkMan
StarkMan
Follow
Oct 29
TUF Protects Updates Only When Clients Enforce Its State
#
softwareupdates
#
tuf
#
supplychain
Comments
Add Comment
3 min read
Moderation
Insiden LiteLLM 1.107.0: Cara Mengunci Dependency agar Tidak Terkena Paket Beracun
Wahyu Andika Putra
Wahyu Andika Putra
Wahyu Andika Putra
Follow
Oct 29
Insiden LiteLLM 1.107.0: Cara Mengunci Dependency agar Tidak Terkena Paket Beracun
#
python
#
pypi
#
supplychain
#
security
Comments
Add Comment
2 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account