Disrupting supply chain attacks on npm and GitHub Actions
Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.
Discussion around the web
- Hacker News90 · 49 💬
Score breakdown
- Technical depth55
- Practical value60
- Originality85
- Writing quality82
- Source reputation85
- Recency18
- External engagement29
- On-site engagement0
More like this
The GitHub Blog47
Upcoming breaking changes for npm v12 - GitHub Changelog
Person·unknown·3 min read
The GitHub Blog50
Staged publishing and new install-time controls for npm - GitHub Changelog
Person·unknown·4 min read
The GitHub Blog54
npm is joining GitHub
Nat Friedman·unknown·9 min read
The GitHub Blog54
GitHub Actions update: Helping maintainers combat bad actors
Chris Patterson·unknown·11 min read
Engradar shows a summary and links to the original article. The full article is hosted on github.blog.