DevOps — Tech News

Все темы agents ai api architecture automation aws backend beginners cloud database devchallenge devops docker javascript kubernetes llm machinelearning mcp node opensource performance productivity programming python security showdev testing tutorial typescript webdev

EN

How we took malware advisories beyond npm

GitHub malware advisories no longer stop at npm. Here's how we wired OpenSSF's malicious-packages data into the Advisory Database, and why we built…

Security Supply chain security GitHub Advisory Database malware npm open source supply chain security

EN

Tame Dependabot: Group your updates, slow the cadence, keep security fast

Dependabot keeps your dependencies current, but its defaults can flood your repository with pull requests. Here's how grouping updates, slowing the…

Engineering Security Supply chain security Dependabot GitHub Actions open source supply chain security

EN

Disrupting supply chain attacks on npm and GitHub Actions

Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their i…

Security Supply chain security GitHub Actions npm supply chain security