DevSecOps
Software Supply Chain Incidents: Dependency Pinning, Provenance and Recovery
Understand software supply chain security: threat model, setup, safe verification and security operations checklist.
Tag
Dependency Security
2 articles
PHP
Secure Composer Dependencies: Audit, Lockfiles and Supply Chain
Practical Composer security audit guidance with risk explanation, safe configuration, tests and security checklist.