In March 2026, Trivy became the latest reminder that software supply chains are, at best, loosely held together with convention and trust.

You must log in or # to comment.

Chat

Bazebara@programming.dev
link
fedilink
English
arrow-up
1·
5 months ago
And this was widely known since git submodules

netsec - Network Security@discuss.tchncs.de

netsec@discuss.tchncs.de

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !netsec@discuss.tchncs.de

This is the netsec Community, a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise - to provide value to security practitioners, students, researchers, and hackers everywhere.

Content Guidelines:

Content should focus on the “How”.
Always try to link to the original source.
Titles should provide context.
Ask Questions with a “[Question]” prefix in the Title.
Hiring Posts must go in the [Hiring] (stickied) Threads.
Commercial advertisement is discouraged.

Discussion Guidelines:

Don’t create unnecessary conflict.
No trolling allowed, limit the use of jokes and memes.
Don’t complain about content being a PDF.
Be nice to each other, everybody started somewhere.

Prohibited Content:

No populist news articles (CNN, BBC, FOX, etc)
No curated lists.
No social media posts (Facebook, Twitter, etc).
No image-only/video-only posts.
No livestreams.
No Tech Support requests.
No paywalled/regwalled content (use archive.is if possible?)
No commercial advertisement.
No crowdfunding posts.
No personally identifiable information.
No doxxing, and no harrassment of any kind.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
1 user / week
6 users / month
13 users / 6 months
1 local subscriber
465 subscribers
22 Posts
1 Comment
Modlog

mods:
cookiengineer@discuss.tchncs.de

The Comforting Lie Of SHA Pinning

The Comforting Lie Of SHA Pinning