HN
Hacker News
Top
New
Best
Ask
Show
Jobs
Comment by sethherr | Hacker News Reader
Parent
Full thread
sethherr
·
This is the opposite of a specific threat vector
View on HN
cdchn
·
Software supply chain attacks not specific enough?
lima
·
Not in terms of specific threat model.
computerfriend
·
Threat: attacker can commit malicious code to a repository by impersonation.
Mitigation: verify commit signatures.
Reply on news.ycombinator.com