1.Attestations: A new generation of signatures on PyPIblog | 2024-11-14 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #pypi | #python
2.Securing the software supply chain with the SLSA frameworkblog | 2024-10-01 13:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #pypi