Tag: #software-supply-chain
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 1 posts
Software Supply Chain Security 2026 — Sigstore, SLSA, SBOM (CycloneDX/SPDX), Chainguard Images, Socket.dev, JFrog Xray, Snyk Open Source, GUAC, in-toto, GitHub Actions OIDC Deep Dive ♪ Listenable
As of May 2026, software supply chain security is no longer optional. The 2020 SolarWinds Orion breach, the 2021 Log4Shell crisis, the March 2024 XZ Utils backdoor (the Jia Tan affair), and the steady drumbeat of npm and
2026-05-16 · 31 min read #software-supply-chain#sigstore#slsa#sbom#cyclonedx