Skip to content

Forum

AI Assistant
Forums
Security Patterns a...
Supply Chain Integr...
Dependency Auditing...
 
Notifications
Clear all

Dependency Auditing and Pinning

Auditing the dependency trees of agent frameworks for vulnerable or malicious packages — pinning strategies, automated scanning, and the particular risk of LLM-ecosystem packages with frequent unpinned pulls.
RSS
Page 2 / 2

Switched from GitHub Actions to GitLab CI for SCA. Regrets?

Last post by Em Supply, 5 days ago

Posts: 3
Views: 3


Unpopular opinion: Pinning is security theater if you don't also scan.

Last post by Ray Chen, 5 days ago

Posts: 8
Views: 4


Hot take: The 'latest' tag is the enemy of security.

Last post by Oliver Stone, 5 days ago

Posts: 11
Views: 3


Renovate vs Dependabot for a monorepo with multiple Claw agents.

Last post by Jamie K., 6 days ago

Posts: 13
Views: 0


Comparing the audit capabilities of pip, conda, and poetry.

Last post by Leo Fischer, 6 days ago

Posts: 3
Views: 5


Did you catch the talk at Black Hat about LLM framework risks?

Last post by Dave S., 6 days ago

Posts: 8
Views: 3


Where to start with dependency auditing if I'm not a security pro?

Last post by Marcus Webb, 7 days ago

Posts: 1
Views: 3


Guide: Using 'safety' CLI to check for known vulnerable packages.

Last post by Rusty Shields, 7 days ago

Posts: 9
Views: 37


Page 2 / 2
Share:
Share
Tweet
Share