Homepage
Open in app
Sign in
Get started
Tagged in
Supply Chain Security
boostsecurity
boostsecurity is on a mission to ensure that we trust the code we build and use.
More information
Followers
20
Elsewhere
More, on Medium
Supply Chain Security
François Proulx
in
boostsecurity
Apr 15
Unveiling ‘poutine’: An Open Source Build Pipelines security scanner
Read more…
8
François Proulx
in
boostsecurity
Mar 15
Opening the Pandora’s box — Supply Chain Insider Threats in Open Source projects
Giving repo “Write”…
Read more…
1
François Proulx
in
boostsecurity
Feb 12
The tale of a Supply Chain near-miss incident
We disclosed to Chainguard in December 2023 that a…
Read more…
5
1 response
François Proulx
in
boostsecurity
Jun 19, 2023
Erosion of Trust: Unmasking Supply Chain Vulnerabilities in the Terraform Registry
Read more…
14
François Proulx
in
boostsecurity
Nov 11, 2022
SLSA dip — It’s Build Time!
This article is part of a multi-part series about the security of the…
Read more…
6
François Proulx
in
boostsecurity
Nov 11, 2022
SLSA dip — At the Source of the problem!
This article is part of a multi-part series about the…
Read more…
122
1 response