Articles tagged "software supply chain"

Software artifacts: hash, don't sign

The single version rule is good for Google and bad for you

Don't use golden images. Do this instead.