HN Explorer

dlor

↗ HN profile [ 332 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. OpenPubKey and Sigstore (blog.sigstore.dev)
    93 points 28
  2. The Tyranny of Nits (leafwing-studios.com)
    1 points 0
  3. CVSS 4.0 Is Here, but Prioritizing Patches Still a Hard Problem (darkreading.com)
    3 points 0
  4. CWE Top Most Dangerous Software Weaknesses (cwe.mitre.org)
    155 points 130
  5. The EU’s Product Liability Directive could kill open source (techradar.com)
    1 points 1
  6. Elastic Stack container images signed with Sigstore (elastic.co)
    1 points 0
  7. Shrink to Secure: Kubernetes and Secure Compact Containers (gsantoro.dev)
    3 points 0
  8. Supply chain security for Go, Part 2: Compromised dependencies (security.googleblog.com)
    2 points 0
  9. The Principle of Minimalism (chainguard.dev)
    9 points 0
  10. Fully bootstrapping Java from source in Wolfi (chainguard.dev)
    8 points 0
  11. Removing PGP from PyPI (blog.pypi.org)
    187 points 193
  12. Sigstore: Roots of Trust for Software Artifacts (infoworld.com)
    1 points 0
  13. He Untold Story of the Boldest Supply-Chain Hack Ever (wired.com)
    8 points 1
  14. Feeling VEXed by software supply chain security? Us, too (theregister.com)
    2 points 0
  15. 87% of Container Images in Prod Have Critical or High-Severity Vulnerabilities (darkreading.com)
    3 points 1
  16. Towards Easier, More Secure Signature Tech for the Java Ecosystem with Sigstore (blog.sigstore.dev)
    1 points 0
  17. GitHub says hackers cloned code-signing certificates in breached repository (arstechnica.com)
    2 points 0
  18. Memory safety is the new black, fashionable and fit for any occasion (theregister.com)
    4 points 0
  19. Understanding the relationship between FOSS and the “software supply chain” (chainguard.dev)
    3 points 1
  20. Are SBOMs Good Enough for Government Work? (chainguard.dev)
    1 points 0
  21. Sigstore December Roundup (blog.sigstore.dev)
    1 points 0
  22. Signatus, ergo securus? Who can sign what with TUF and Sigstore (blog.sigstore.dev)
    1 points 0
  23. Sigstore the Easy Way (rewanthtammana.com)
    1 points 0
  24. Iranian hackers use Log4Shell to mine crypto on federal computer system (cyberscoop.com)
    3 points 0
  25. Software Dark Matter Is the Enemy of Software Transparency (chainguard.dev)
    8 points 0