Supply chain security for Go, Part 2: Compromised dependencies

“Secure your dependencies”—it’s the new supply chain mantra. With attacks targeting software supply chains sharply rising, open source developers need to monitor and judge the risks of the projects they rely on. Our previous installment of the Supply chain security for Go series shared the ecosystem tools available to Go developers to manage their dependencies

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.