GitHub explains how it integrated OpenSSF’s malicious-packages data into the GitHub Advisory Database, expanding open-source malware advisories beyond npm while using a defensive pipeline for supply-chain reports.
How we took malware advisories beyond npm
GitHub explains how it integrated OpenSSF's malicious-packages data into the GitHub Advisory Database, expanding open-source malware advisories beyond npm while using a defensive pipeline for supply-chain reports.
Source: GitHub Blog