Securing your VCS and SCM
It should be noted that VCS and SCM are used interchangeably by many in tech. Since the most used tool for those is Git and its own appellation is Git SCM, we’ll standardize on SCM for the rest of this discussion.
As noted before, one of the ways hackers inject vulnerabilities and malware and gain access to privileged information is by compromising your SCM. The most popular tool for version control and SCM is Git SCM.10 This is the open source version of Git on which commercial services such as GitHub, GitLab, and Atlassian Bitbucket are based.
Git was created by Linus Torvalds, creator of Linux, to replace the current software he and other Linux contributors were using. It has since become the de facto source code manager and version control tool for the bulk of both open source and closed source projects. According to GitHub’s 2023 Octoverse report, 93% of developers currently use Git.11
11...
