The Invisible Threat: Securing Open-Source Credentials in Supply Chain
Uncover the hidden risks of leaked credentials in your open-source dependencies. Learn how Google Cloud's deps.dev is securing the software supply chain at scale.
9 min read
Topic
Open-source security
Every article tagged Open-source security, newest first.
2 articles
Related topics
- Credential Security, 1 article
- Dependency vulnerabilities, 1 article
- deps.dev, 1 article
- Google Cloud Security, 1 article
- Leaked credentials, 1 article
- SBOM, 1 article
- Software Bill of Materials, 1 article
- Software Supply Chain, 1 article
- software transparency, 1 article
- SPDX, 1 article
- Supply Chain Security, 1 article
- VEX, 1 article
Articles tagged Open-source security
SBOMs: The Key to Software Supply Chain Security or an Unachievable Fantasy?
Unlock software supply chain security with SBOMs. Explore what an SBOM is, why it's vital for vulnerability management & compliance, current challenges, and future outlook.
9 min readLooking for something specific?
Search every article by topic, tool or CVE.
Keep reading
Latest from the blog
GitHub Package Firewall: Install-Time Security for AI Agents and Pipelines
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
18 min read
Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read