1. Attestations: A new generation of signatures on PyPI blog | 2024-11-14 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #pypi | #python
2. Securing the software supply chain with the SLSA framework blog | 2024-10-01 13:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #pypi