software supply chain security
AssessTechniques
Security practices that reduce risk from dependencies, build systems, and delivered software artifacts.
Why it's here
Placed in Assess: 2 article(s) of evidence from 2 source(s), led by open-source activity, with 1 in the last 30 days. Confidence 38%.
Evidence (2)
- 7Hacker News·9/5/2026securityTrusting-Trust Attack on a Linux Distribution
This arXiv paper describes a trusting-trust style attack targeting an entire Linux distribution, highlighting how build and supply-chain trust can be subverted. The work is framed as a security research result and underscores risks in compiler and distribution-level integrity assumptions.
- 6GitHub Blog·8/27/2026open_sourceOpenClaw maintainers share lessons on scaling and securing a viral open source project
GitHub highlights how OpenClaw, a personal AI assistant project that runs on users’ devices, rapidly grew into a massive open source repository with heavy contributor activity. The maintainers discuss managing AI-generated pull requests, welcoming new contributors, and tightening security and supply-chain practices as the project scales.