4 ms·
This security theater around supply chain security is getting ridiculous. What we need is true supply chain security, but no one is willing to pay for that; it
by gavinhoward 2y ago
This security theater around supply chain security is getting ridiculous.
What we need is true supply chain security, but no one is willing to pay for that; it would mean paying FOSS projects, and companies don't want to pay for their "free" software.
- rho138 2y agoI just want an actual bill of versioned open source software used in each closed source app.