Further reading
These are the references from this chapter that you can also use to get more information on the topics:
- How one programmer broke the internet by deleting a tiny piece of code, Keith Collins (2016): https://qz.com/646467/how-one-programmer-broke-the-internet-by-deleting-a-tiny-piece-of-code/
- Kik, Left-Pad, and NPM – Oh My!, Tyler Eon (2016): https://medium.com/@kolorahl/kik-left-pad-and-npm-oh-my-e6f216a22766
- Secure at every step: What is software supply chain security and why does it matter?, Maya Kaczorowski (2020):
- About the dependency graph:
- About Dependabot version updates:
- About secret scanning: https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning
- About GitHub Advanced Security:
- About code scanning: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning
- CodeQL code scanning: new severity levels for security...