GitHub 谈开源供应链安全：从 GitHub Actions 到 npm 的防护措施与路线图

Securing the open source supply chain across GitHub

来源：GitHub Security Lab · github.blog