blog: Dependency Confusion and Typosquatting Attacks #1109
Conversation
…Attacks Blogpost that looks at dependency confusion and typosquatting attacks from defender's perspective and defines "managed ingestion" as an important capability for supply chain risk management. Signed-off-by: Meder Kydyraliev <[email protected]>
✅ Deploy Preview for slsa ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
Co-authored-by: Joshua Lock <[email protected]> Signed-off-by: Meder Kydyraliev <[email protected]>
There was a problem hiding this comment.
Thanks for submitting this blog post @meder ! My main high-level question is about the audience for this blog post. This is a relatively advanced topic, so if the intent is to reach a more general audience, my main suggestion is to make some revisions in the text that would help such an audience grapple with this topic. Either way, I left several comments that should help smooth out the flow and ease the transitions between sections to guide a more familiar reader as well.
Signed-off-by: Meder Kydyraliev <[email protected]>
|
@arewm @marcelamelara thank you both for the review and feedback, PTAL. |
Signed-off-by: Meder Kydyraliev <[email protected]>
|
Thank you for the clarifications, @marcelamelara. Feedback was addressed, PTAL. |
Co-authored-by: Marcela Melara <[email protected]> Signed-off-by: Meder Kydyraliev <[email protected]>
Signed-off-by: Meder Kydyraliev <[email protected]>
Signed-off-by: Meder Kydyraliev <[email protected]>
|
@marcelamelara I believe all feedback was addressed, PTAL. |
|
@marcelamelara @arewm I'd like to target publish this on Wed (Sep 4th), please let me know if you have any blocking feedback. |
Signed-off-by: Meder Kydyraliev <[email protected]>
Blogpost that looks at dependency confusion and typosquatting attacks from defender's perspective and defines "managed ingestion" as an important capability for supply chain risk management.