3 ms·

Software supply chain attacks not specific enough?

• lima 3y ago
  Not in terms of specific threat model.
  • computerfriend 3y ago
    Threat: attacker can commit malicious code to a repository by impersonation. Mitigation: verify commit signatures.