Tag feed

#software-supply-chain

8 posts0 followers

Explore Hashnode

Alternatives

MSManu Shuklaecorpit.hashnode.dev2d ago · 11 min read

Software supply chain security in 2026: an enterprise playbook after the npm attack wave

Software supply chain security in 2026: an enterprise playbook after the npm attack wave Summary. In four days in July 2026, two npm supply chain attacks showed why perimeter thinking fails. On 11 Jul

0

PKPrashant Koiralablog.prashantkoirala.info.np4d ago · 22 min read

Software publishing is moving beyond long-lived tokens

Publishing software used to depend on a secret. A maintainer created an API token in a package registry, copied it into a CI secret store, and allowed a workflow to use it every time a release was pub

0

MBMatthias Brunsblog.matthiasbruns.comMay 10 · 6 min read

Open Component Model in Production: Building Software Bills of Delivery for Cloud-Native Supply Chains

The Open Component Model (OCM) represents a fundamental shift in how we approach software supply chain security. While most organizations struggle with visibility into their distributed systems' dependencies, OCM provides an open standard for creatin...

0

PKPrashant Koiralablog.prashantkoirala.info.npMay 6 · 27 min read

AI changed the software supply chain

Most developers still think of security as something that happens inside their own code. That used to be a useful mental model. You wrote code, tested it, scanned it, shipped it, and patched it when a

1

V

MBMatthias Brunsblog.matthiasbruns.comMay 1 · 7 min read

Software Bills of Delivery: Beyond SBOMs with Component Models

Traditional Software Bills of Materials (SBOMs) have served as the foundation for software supply chain transparency, but they're showing their limitations in today's complex, distributed environments. While SBOMs catalog components and dependencies,...

0

MBMatthias Brunsblog.matthiasbruns.comApr 28 · 8 min read

Open Component Model in Production: Building Software Bills of Delivery for Cloud-Native Supply Chains

The software supply chain has become a critical attack vector, with incidents like SolarWinds and Log4Shell exposing how vulnerable our interconnected systems really are. Traditional Software Bills of Materials (SBOMs) tell us what components exist, ...

0

Bbinaditbinadit.hashnode.devApr 7 · 6 min read

Supply chain security for dependencies

Securing your software supply chain: why dependency management is your biggest security blind spot Modern applications depend on hundreds or thousands of external packages, each representing code written by others but running with your application's ...

0

GVGaurav Vishwakarmablogs.gaurav.oneMar 6 · 7 min read

Combating 2025's AI-Promoted Malware: Blockchain for Software Supply Chain Integrity

The digital landscape of 2025 presents a formidable challenge: the proliferation of AI-promoted malware. As artificial intelligence advances, so too does its weaponization by malicious actors, leading to sophisticated, adaptive threats that target th...

0

HHongsaysomething.hashnode.devAug 28, 2025 · 4 min read

Easyjson's Geopolitical Risk: Open Source Code and National Security Concerns

Imagine discovering that a tiny, efficient piece of code running inside thousands of U.S. Department of Defense systems—along with software in finance, healthcare, and critical infrastructure—is maintained primarily by developers in Moscow, linked to...

0

#software-supply-chain

Search Hashnode

#software-supply-chain

Explore Hashnode

Software supply chain security in 2026: an enterprise playbook after the npm attack wave

Software publishing is moving beyond long-lived tokens

Open Component Model in Production: Building Software Bills of Delivery for Cloud-Native Supply Chains

AI changed the software supply chain

Software Bills of Delivery: Beyond SBOMs with Component Models

Open Component Model in Production: Building Software Bills of Delivery for Cloud-Native Supply Chains

Supply chain security for dependencies

Combating 2025's AI-Promoted Malware: Blockchain for Software Supply Chain Integrity

Easyjson's Geopolitical Risk: Open Source Code and National Security Concerns

Trending tags this week