All articles/Tag
Ci Cd
Watching the watchers: monitoring your CI/CD pipelines, branch protection and repo hygiene
Most organisations monitor production closely and barely monitor their delivery tooling. Someone sets up a nightly build or a branch protection rule and confirms it works that day. After that, nobody looks at it again…
Supply-chain attacks: package cooldowns and policy checks for npm, PyPI and NuGet
On 4 August 2026, a self-propagating worm called ChainDrop tore through npm. BleepingComputer reported more than 1,300 compromised packages with about two billion monthly downloads between them, including keyv,…
#supply-chain-security#npm#dependency-management#devsecops#ci-cd