Continuous Integration Has Its Downsides. As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not only rely on code integrity tools, but also to introduce a delay before merging new repos, since unfolding attacks tend to get spotted in days, if not hours or minutes.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/flurry-supply-chain-software-library-attacks-a-31503
