Loading

Topic

software supply chain security

14 posts about software supply chain security by 6 contributors.

Know software supply chain security? Share what you know with developers who are learning it.

Write an article Ask a question

+ Follow software supply chain securityBe the first to follow this

Articles: 14
Contributors: 6

Articles about software supply chain security

Article · Cyber Security
Detecting Supply Chain Attacks in AI Coding Tool Extensions
Learn how to identify and reduce supply chain risks in AI coding extensions through inventories, dependency reviews, SBOMs, controlled updates, and runtime monitoring.
Vivek Kumar2d4,5811,000

Article · Kubernetes

How to Verify Container Image Signatures Before Kubernetes Deployment

Learn how to sign and verify container image digests with Cosign and enforce trusted images before Kubernetes workloads are deployed.

Saurav KumarOct 234,4901,000

Article · Docker

How to Generate an SBOM and Verify Container Images in CI/CD

Learn how to scan container images, generate SBOMs with Trivy, sign images, and verify signatures in a CI/CD pipeline before deployment.

Riya PatelOct 154,3081,000

Article · Cyber Security

How Developer Credentials Can Turn a Package Install Into a Cloud Security Risk

Learn how malicious package installation scripts can access developer credentials and become a path to cloud compromise, and how least privilege and credential isolation reduce the risk.

Riya PatelSep 303,8841,000

Article · Cyber Security

GitHub Is Changing Dependabot Alert Retention: What Gets Deleted?

Learn how Dependabot alert retention affects closed vulnerability records and what teams should preserve for security reporting, audits, compliance, and history.

Riya PatelSep 283,6581,000

Article · Software Architecture/Engineering

Top 20 Tools to Assess Overall Software Risk (2026)

Compare 20 enterprise software risk tools across security, SCA, SBOM, architecture, AI code, and governance. See what each actually covers.

The Code RegistrySep 232,7501,000

Article · AI

Top 20 Software Due Diligence Tools Compared (2026)

Compare 20 software due diligence tools across security, architecture, SBOM, provenance, and AI-code risk. Evidence-based, no fabricated rankings.

The Code RegistrySep 184,8671,000

Article · DevOps

GitHub Actions cache-mode: Preventing Cache Poisoning with Least-Privilege Workflows

Learn how GitHub Actions cache-mode controls cache access and how least-privilege workflow permissions can reduce cache poisoning and supply-chain risks.

Ananya DesaiSep 112,3141,000

Article · AI

How Enterprises Should Govern AI-Generated Code

Learn how enterprises can govern AI-generated code with provenance tracking, supply chain security, architectural monitoring, policy enforcement, and continuous software assurance.

The Code RegistrySep 83,3011,000

Article · Software Architecture/Engineering

Software Due Diligence: A Practical Risk Framework

Evaluate software security, architecture, dependencies, provenance, and technical debt. Discover a practical framework for enterprise software due diligence.

The Code RegistrySep 33,8621,000

Article · Software Architecture/Engineering

Understanding Software Risk Without Being a Developer

Learn how enterprises assess third-party software risk across code, dependencies, provenance, architecture, AI code, technical debt, and governance.

The Code RegistrySep 36,2181,000

Article · Open Source

How to Detect Hidden Risks in Third-Party Software

Learn how enterprises detect hidden third-party software risk across code, dependencies, provenance, architecture, AI code, technical debt, and governance.

The Code RegistryAug 252,8671,000

Article · Security

Building Secure Software Supply Chains with Sigstore and Cosign

Learn how Sigstore and Cosign secure software supply chains through artifact signing, verification, transparency logs, and secure CI/CD pipeline integration.

Niharika GuptaJul 162961,000

Article · Blockchain

Secure Software Supply Chains with SLSA Framework

Secure your software supply chain with SLSA. Learn how this framework enhances integrity, reduces risk, and builds trust in your development process.

Niharika GuptaJul 63181,000

software supply chain security · by contributions

Top experts

1

The Code Registry6 posts · 23.9k reads 2

Riya Patel3 posts · 11.8k reads 3

Niharika Gupta2 posts · 614 reads 4

Vivek Kumar1 post · 4.6k reads 5

Saurav Kumar1 post · 4.5k reads

?Your name goes here.First article: 1,000 SHARP.Join

Members onlyFeatured eBookClaude for AI-Native Builders171 pages · Members download free.Download now

DevSocialUpcoming · 3rd editionAI Agents ConferenceNov 23–27, 2026Live onlineMembers only17days leftRegister

Write about software supply chain security

Publish an article in this category and earn +1,000 SHARP when it is approved.

Write an article

DevSocial PressAI native · 02The Builders SeriesClaude for AI-Native BuildersA beginner's guide for creators and innovators.Mahesh Chand171 pages · Beginner

software supply chain security

Articles about software supply chain security

Detecting Supply Chain Attacks in AI Coding Tool Extensions

How to Verify Container Image Signatures Before Kubernetes Deployment

How to Generate an SBOM and Verify Container Images in CI/CD

How Developer Credentials Can Turn a Package Install Into a Cloud Security Risk

GitHub Is Changing Dependabot Alert Retention: What Gets Deleted?

Top 20 Tools to Assess Overall Software Risk (2026)

Top 20 Software Due Diligence Tools Compared (2026)

GitHub Actions cache-mode: Preventing Cache Poisoning with Least-Privilege Workflows

How Enterprises Should Govern AI-Generated Code

Software Due Diligence: A Practical Risk Framework

Understanding Software Risk Without Being a Developer

How to Detect Hidden Risks in Third-Party Software

Building Secure Software Supply Chains with Sigstore and Cosign

Secure Software Supply Chains with SLSA Framework

Top experts