Security
Your dependencies are your attack surface: a supply-chain security checklist
Most of the code you ship, you didn't write. A short, practical checklist for keeping third-party packages from becoming your next incident.
Tag
#supply-chain
Every story tagged #supply-chain.
Security
Signing commits and build artifacts: proving where code came from
Anyone can set their git author name to yours. Signatures let you verify who actually made a commit, and which pipeline produced a release.