A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

Filippo Valsorda，Filippo Valsorda 的安全博客，Go 语言密码学维护者，关于加密、安全与软件供应链。关注

Project compromises have common root causes we can mitigate: phishing, control handoff, and unsafe GitHub Actions triggers.

添加评论
点赞收藏
点踩分享查看原文
评论
?
参与讨论