87% of Container Images in Prod Have Critical or High-Severity Vulnerabilitiesdarkreading.com·3 pts·dlor·1
Towards Easier, More Secure Signature Tech for the Java Ecosystem with Sigstoreblog.sigstore.dev·1 pts·dlor·0
GitHub says hackers cloned code-signing certificates in breached repositoryarstechnica.com·2 pts·dlor·0
Understanding the relationship between FOSS and the “software supply chain”chainguard.dev·3 pts·dlor·1