wiz-sec / open-cvdb

An open project to list all publicly known cloud vulnerabilities and CSP security issues
https://cloudvulndb.org
Creative Commons Attribution 4.0 International
306 stars 61 forks source link

Dependency confusion in AWS CodeArtifact #59

Closed korniko98 closed 2 years ago

korniko98 commented 2 years ago

https://zego.engineering/dependency-confusion-in-aws-codeartifact-86b9ff68963d https://aws.amazon.com/blogs/devops/tighten-your-package-security-with-codeartifact-package-origin-control-toolkit/