A Critical JFrog Artifactory Bug Is Reportedly Being Exploited Days After Its Patch
JFrog patched a critical Artifactory authentication bypass on...
Browse Tag
Software Supply Chain
9 Articles
Minimus’s Shutdown Turns Hardened Container Images Into a Commodity Problem
Minimus raised $51 million to build hardened container images,...
How to Lock Python Dependencies With pip’s pylock.toml (PEP 751)
A hands-on tutorial that generates a PEP 751 pylock.toml file...
How to Generate and Sign an SBOM for a Container Image With Syft and Cosign
A beginner-friendly, step-by-step tutorial that walks you...
Docker Puts EU Cyber Resilience Act Deadlines on Container Teams’ Calendar
Docker’s new CRA overview turns Europe’s 2026 reporting and 2027...
Docker Says SBOMs Are Becoming a Software Shipping Gate
Docker’s new SBOM guide shows how software bills of materials...
Snyk’s Agentic Development Data Turns AI Coding Into a Supply-Chain Problem
Snyk’s scan of nearly 10,000 developer environments shows why AI...
Red Hat’s Software Fabric Blueprint Turns Open Source Security Into a Speed Test
Red Hat’s software fabric blueprint reframes open source...
A Practical Software Supply Chain Security Checklist for Development Teams
A hands-on checklist for development teams: pin trusted inputs,...