-
Hi, I'm Harshita. I’m working with [CNCF and the Google Open Source Security Team for the GSoC 2024 term](https://github.com/cncf/mentoring/issues/1196). We are collaborating to enhance security pract…
-
### What is the problem this feature will solve?
Recent malicious supply chain attacks have seen binary files slipped into a package (as test files in that case) that served as an attack vector. Coul…
-
Context: the new trusted publishers method rocks, you all rock, and I want as many prominent pypi projects to adopt this as possible.
**What's the problem this feature will solve?**
- Improve disc…
rsokl updated
1 month ago
-
**As** Consumer of UDS Marketplace applications
**I want** confidence in the security and functionality of applications
**So that** I can Improve the accessibility of software for operational users
#…
-
## Main Objectives
- Algorithmic Stability: Develop innovative algorithmic mechanisms that ensure synthetic stablecoins maintain their peg reliably, even during periods of market volatility.
- Over-Co…
-
### Requirement
Hi, I'm Harshita. I’m working with [CNCF and the Google Open Source Security Team for the GSoC 2024 term](https://github.com/cncf/mentoring/issues/1196). We are collaborating to enh…
-
Supply Chain Security
-
Software Supply Chain Security become a critical approach for many security programs. Vietnam is also a country that adopts new standards, and processes to enhance their chance in Software Supply Chai…
-
A number of SW supply chain (SWSC) best practices frameworks have come out of CISA, NIST, and the OpenSSF. This issue tracks the implementation plan for meeting these practices.
Implementing these …
-
/kind feature
**Why you need this feature:**
Kubeflow's workflows are running with write-all permissions. This puts the project at risk of supply-chain attacks.
I took a look at all the workf…