Through artifact attestation and the SLSA framework, GitHub’s Jennifer Schelkopf argues that at least some supply chain attacks can be stopped in their tracks.
Related Posts
The U.S. government today unsealed criminal charges against 16 individuals…