blog: Dependency Confusion and Typosquatting Attacks #1109
Conversation
…Attacks Blogpost that looks at dependency confusion and typosquatting attacks from defender's perspective and defines "managed ingestion" as an important capability for supply chain risk management. Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
✅ Deploy Preview for slsa ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
Co-authored-by: Joshua Lock <joshuagloe@gmail.com> Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
There was a problem hiding this comment.
Thanks for submitting this blog post @meder ! My main high-level question is about the audience for this blog post. This is a relatively advanced topic, so if the intent is to reach a more general audience, my main suggestion is to make some revisions in the text that would help such an audience grapple with this topic. Either way, I left several comments that should help smooth out the flow and ease the transitions between sections to guide a more familiar reader as well.
Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
|
@arewm @marcelamelara thank you both for the review and feedback, PTAL. |
Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
|
Thank you for the clarifications, @marcelamelara. Feedback was addressed, PTAL. |
Co-authored-by: Marcela Melara <marcela.melara@intel.com> Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
|
@marcelamelara I believe all feedback was addressed, PTAL. |
|
@marcelamelara @arewm I'd like to target publish this on Wed (Sep 4th), please let me know if you have any blocking feedback. |
Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com>
…1109) Blogpost that looks at dependency confusion and typosquatting attacks from defender's perspective and defines "managed ingestion" as an important capability for supply chain risk management. --------- Signed-off-by: Meder Kydyraliev <1212257+meder@users.noreply.github.com> Co-authored-by: Joshua Lock <joshuagloe@gmail.com> Co-authored-by: Marcela Melara <marcela.melara@intel.com>
Blogpost that looks at dependency confusion and typosquatting attacks from defender's perspective and defines "managed ingestion" as an important capability for supply chain risk management.