11 posts about supply chain security by 5 contributors.
Know supply chain security? Share what you know with developers who are learning it.
Learn how to pin GitHub Actions to reviewed commit SHAs, replace movable tags, and maintain a safer workflow update and review process.
Learn how to investigate the Zod 4.6.6 security alert by checking installed versions, lock files, Git dependencies, package provenance, and dependency history.
Learn how to configure NuGet package-age rules in .NET 11 RC 2 using the dotnet CLI to delay newly published package versions and improve dependency update control.
Learn how npm Trusted Publishing uses OIDC to publish packages from CI/CD workflows without storing long-lived npm access tokens.
Learn how NuGet Trusted Publishing enables keyless .NET package releases using modern identity-based authentication to reduce long-lived credential and supply chain risks.
Learn how to automate NuGet API key rotation in GitHub Actions and safely manage 30-day credentials without disrupting .NET package publishing workflows.
Learn how to detect dependency confusion attacks in enterprise .NET builds by identifying malicious packages, namespace conflicts, NuGet risks, and software supply chain threats.
Secure AI agents by treating third-party MCP tools as software dependencies, applying least privilege, and robust governance.
Secure your .NET container supply chain with signed images. Learn how to build trust, verify authenticity, and enforce deployment policies.
Sigstore simplifies software signing & verification with identity-based certs, transparency logs, and automated workflows for secure supply chains.
Protect your software supply chain! Learn how to fix dependency confusion attacks in private feeds. Secure your CI/CD pipelines and prevent malicious package installs.
DevSocialUpcoming · 3rd editionAI Agents ConferenceNov 23–27, 2026Live onlineMembers only17days leftRegisterPublish an article in this category and earn +1,000 SHARP when it is approved.
Write an article