Software supply chain attacks can take many forms, but the most common method is through the insertion of malicious code into the software development process.

Software composition analysis (SCA) tools render too many false positives, and aren't smart enough to find modified dependencies. New methods show promise...

Here are three practical steps you can take to minimize risk in your software supply chain.

Secure your software supply chain with SLSA, a framework ensuring provenance, compliance, and protection against evolving threats in software development.