SBOMs missed scope of a Shai-Hulud supply-chain compromise
A stale SBOM called a SaaS environment clean while a hidden transitive dependency had already run.
1
Stories per day · 30 days
1 stories, newest first · one card per story
Stories tagged #transitive-dependency