Prashant's Blog

Prashant's Blog

#software-supply-chain

Articles tagged with #software-supply-chain

Software publishing is moving beyond long-lived tokens
Package registries are replacing reusable CI secrets with workload identity, short-lived credentials, provenance, and staged approval.
Jul 21, 202622 min read12
AI changed the software supply chain
Most developers still think of security as something that happens inside their own code. That used to be a useful mental model. You wrote code, tested it, scanned it, shipped it, and patched it when a
May 6, 202627 min read21