Stacklok Blog: Latest Insights on Open Source and Software Supply Chain Security

North Korean State Actors Exploit Open Source Supply Chain via Malicious npm Package

Poppaea McDermott /

Jul 24, 2024

Introducing the Trusty Dependency Risk Action: Automatically scan PRs for unsafe dependencies

Megan Bruce /

Jul 18, 2024

Trusty

Minder

Secrets management: GitHub-native tools and best practices to keep your secrets safe

Stacklok /

Jul 16, 2024

Securing our security platform: Findings from Minder's independent security audit

Stacklok /

Jul 12, 2024

Cybersecurity

DestroyLoneliness: npm starjacking attack on Roblox Node.js library delivers QuasarRAT

Poppaea McDermott /

Jul 11, 2024

Cybersecurity

Security Alerts

Introducing the Frizbee GitHub Action to automate pinning actions and container images to digests

Radoslav Dimitrov / Luke Hinds /

Jun 20, 2024

OSS

Python typosquatting attack targets popular open source PyPI library with 30M weekly downloads

Luis Juncal / Luke Hinds /

Jun 6, 2024

Security Alerts

All I really need to know I learned from co-founding Kubernetes

Craig McLuckie /

Jun 6, 2024

OSS

This Month in Minder: May 2024

Stacklok /

May 31, 2024

Minder

OSS

Resources

Featured Content

Unlocking secure software distribution with Minder and GitHub Artifact Attestations

Driving safe and sustainable open source consumption with two new Stacklok capabilities

Software Supply Chain Security (S3C) Weekly

For Developers

Vet the supply chain risk of open source packages

For Open Source Communities

Secure your software supply chain

For Developers

Vet the supply chain risk of open source packages

For Open Source Communities

Secure your software supply chain

Resources

Stacklok Blog

North Korean State Actors Exploit Open Source Supply Chain via Malicious npm Package

Introducing the Trusty Dependency Risk Action: Automatically scan PRs for unsafe dependencies

Secrets management: GitHub-native tools and best practices to keep your secrets safe

Securing our security platform: Findings from Minder's independent security audit

DestroyLoneliness: npm starjacking attack on Roblox Node.js library delivers QuasarRAT

Introducing the Frizbee GitHub Action to automate pinning actions and container images to digests

Python typosquatting attack targets popular open source PyPI library with 30M weekly downloads

All I really need to know I learned from co-founding Kubernetes

This Month in Minder: May 2024

Newsletter

Stay in the loop

Main Menu

Products

Resources

Contact Us