Topic

software-supply-chain

The Key in the Bundle

A production AWS key reached every customer browser. Here is what that exposure reveals about builds, permissions and breach evidence.

Learn how to trace an unapproved agent skill through CI logs, prove what ran, and close the approval gaps that hid it.

Found an unfamiliar AI-authored commit? Learn how to trace its origin, contain access and restore safe merges without trusting the diff alone.

A small feature commit can carry a poisoned dependency. Learn what to inspect before hidden code reaches your build or production systems.