1 year ago

From hijacked updates to compromised open source code, software supply chain attacks don’t seem to be slowing down. Over the course of 2021, https://anchore.com/blog/2022-security-trends-software-supply-chain-survey/ Securing the supply chain can be challenging due to its many components and the numerous opportunities for exploitation from cybercriminals. https://scribesecurity.com/, a cybersecurity company specializing in the software supply chain, is aiming to make security a standard that’s easy to uphold. Scribe is releasing a code integrity validator (Scribe Integrity) that verifies and authenticates proprietary and open source code.

According to Nebenzahl, Scribe’s approach to securing against open source and supply chain attacks is focusing on the artifacts.