Blog

Supply-chain field notes.

Writeups on real supply-chain attacks, how detection holds up, and keeping builds safe — from the team building Upwarden.

Jul 17, 2026 · supply-chain · github-actions · ci · oidc

Two lines to close your CI's supply-chain door

setup-upwarden is now on the GitHub Marketplace — the google-github-actions/auth for software supply-chain security. Keyless OIDC, every dependency fetch authenticated, attributed, and policy-enforced.

Read →

Subscribe via RSS.