🧰 SLSA

The items that name it 13

• Governing the Agentic SDLC Through Continuous Policy Enforcement
  articleas classification.key entities2026-10-12
• How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise | Blog | Endor Labs
  writeupas classification.key entities2026-10-12
• Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
  articleas tools2026-09-24It is written here as SLSA (Supply-chain Levels for Software Artifacts).

  Provenance standard; the page recommends enforcing Level 2+ provenance checks.

• GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
  articleas classification.key entities2026-09-16
• vet (SafeDep)
  repoas tools2026-09-07

  Supply chain security framework referenced as underlying foundation

• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.technologies2026-08-24
• NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages | Blog | Endor Labs
  advisoryas classification.key entities2026-08-04
• 'ChainDrop' worm compromises hundreds of popular npm packages
  writeupas classification.key entities2026-08-04
• AI-Assisted Vulnerability Management
  articleas classification.key entities2026-07-18
• Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
  articleas classification.key entities2026-06-02
• CSA: VulnOps in the Age of AI
  articleas tools2026-05-13

  Industry framework for software supply-chain transparency referenced as a standard for supply chain awareness

• Kingfisher (MongoDB)
  articleas classification.key entities2026-05-06
• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas classification.technologies

In every workspace you can read 14