Record · corpus.blog/posts/01a0ca89-a84f-7180-88dc-e5699f709cb7

Know, Prevent, Fix: A framework for shifting the discussion around vulnerabilities in open source

Google Security Blog · published 3 February 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at security.googleblog.com Wayback capture

4blogs citing

First cited: 5 Feb 2021
Most recent: 19 Sept 2022
Rank this month: not ranked
Links from this post: 19
Words captured: 3,556

Cited by

Blog

In the post

Date

iliana.fyi

There is no “software supply chain” Read at the source ↗

19 Sept 2022

lu.is

Setting new expectations for open source maintainers Read at the source ↗

18 Aug 2021

Educated Guesswork

Addressing Supply Chain Vulnerabilities Read at the source ↗

27 Feb 2021

Terence Eden’s Blog

That's not my name! Practical problems in real name policies. Read at the source ↗

5 Feb 2021

Links from this post

Link

Host

https://cloud.google.com/blog/products/identity-security/how-were-helping-reshape-software-supply-chain-ecosystem-securely

cloud.google.com

https://queue.acm.org/detail.cfm?id=3344149

queue.acm.org

https://www.sonatype.com/hubfs/Corporate/Software%20Supply%20Chain/2020/SON_SSSC-Report-2020_final_aug11.pdf

sonatype.com

https://openssf.org/

openssf.org

https://github.com/ossf/scorecard

github.com

https://arxiv.org/pdf/2002.01139.pdf

arxiv.org

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156

cve.mitre.org

https://semver.org/

semver.org

https://github.com/ossf/criticality_score

github.com

https://openssf.org/blog/2021/01/27/digital-identity-attestation-roundup/

openssf.org

https://github.com/ossf/wg-digital-identity-attestation

github.com

https://blog.npmjs.org/post/180565383195/details-about-the-event-stream-incident

blog.npmjs.org

Home Read at the source ↗

certificate.transparency.dev

Add tamper checking to a package manager Read at the source ↗

transparency.dev

https://dl.acm.org/doi/10.1145/358198.358210

dl.acm.org

https://www.crowdstrike.com/blog/sunspot-malware-technical-analysis/

crowdstrike.com

https://cloud.google.com/security/binary-authorization-for-borg

cloud.google.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDF4_JzySd_CLg6rA9oYottsxroOUzUp_ydMpjU04woI7NvSiSmbAzUxq8mQGxh065XK4VlfqMl9hTvEd6zPzhA242vaGhSAtdZlyfLyRBEF6bFjtKqMEn2rPX6mf-rlMsllPjQFh21MYdF7k5vJNy60xhWV4tw8zb9mCM_w0jaC_36zvSBa3UB43m/s1454/Vuln%20Management.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1iRSvEziwPKfPI7CbohKLjp7dsFQZdstGRoQvtgYEUB-QkA58OL39iC73ZK4Vrir0-mSib-_pxd6mqVbGQJDqAgiQlF0CUqnFrVjYQabWLArYt0q2K_oNpmo08hfVhZpYRxhfW1xuJlHy5R9HAbgFFjD5CL5rqRC0Kq26oZv_Et7dqXHpLDki59b_/s1430/Critical%20OSS%20Goals.png

blogger.googleusercontent.com