5 ms·
My bad, I didn't check who wrote it. I assumed it was written from a developer perspective, as the arguments seem poorly made from an infosec perspective.
by MattPalmer1086 4y ago
My bad, I didn't check who wrote it.
I assumed it was written from a developer perspective, as the arguments seem poorly made from an infosec perspective.
- MattPalmer1086 4y agoTo give some context here, I currently work on SDLC and dev security. Supply chain attacks are high on the agenda right now. I don't have a problem with this set of recommended practices. And that's all they are. These are things to consider and only constitute guidance, which may be out of date. It says all this in the intro.