
GitHub Package Firewall: Install-Time Security for AI Agents and Pipelines
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
Topic
Every article tagged Supply Chain Security, newest first.
Related topics

GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.

Think you may be compromised by LiteLLM? Learn which LiteLLM versions were malicious, how to use the CloudSEK lookup, what to check, and which credentials to rotate.

pnpm 11.0 is here with critical security defaults. Learn how 'minimumReleaseAge' and 'blockExoticSubdeps' protect your SDLC from immediate supply chain threats.

New cybersecurity research uncovers how AI coding assistants like Cursor and GitHub Copilot and CI/CD agents are being exploited for data theft and remote code execution. Learn the details behind ‘IDEsaster’ and ‘PromptPwnd,’ plus essential steps to secure your development environment.

Unlock software supply chain security with SBOMs. Explore what an SBOM is, why it's vital for vulnerability management & compliance, current challenges, and future outlook.
Looking for something specific?
Search every article by topic, tool or CVE.