https://openclawsecurity.net/community/openclaw-tool-supply-chain/ openclawsecurity.net Discussion Board en-US Tue, 29 Sep 2026 10:30:09 +0000 wpForo 60 https://openclawsecurity.net/community/openclaw-tool-supply-chain/anyone-else-having-issues-with-the-openclaw-registrys-certificate-expiry/ Wed, 15 Jul 2026 08:59:59 +0000 Supply Chain Integrity for Tools Anika Patel https://openclawsecurity.net/community/openclaw-tool-supply-chain/anyone-else-having-issues-with-the-openclaw-registrys-certificate-expiry/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/step-by-step-creating-a-minimal-sbom-for-a-simple-python-tool/ Tue, 14 Jul 2026 07:00:15 +0000 Supply Chain Integrity for Tools Ray Z. https://openclawsecurity.net/community/openclaw-tool-supply-chain/step-by-step-creating-a-minimal-sbom-for-a-simple-python-tool/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/whats-your-threshold-for-updating-a-tool-when-a-dep-has-a-medium-severity-cve/ Mon, 13 Jul 2026 07:00:33 +0000 Supply Chain Integrity for Tools Raymond T. https://openclawsecurity.net/community/openclaw-tool-supply-chain/whats-your-threshold-for-updating-a-tool-when-a-dep-has-a-medium-severity-cve/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/am-i-the-only-one-who-manually-checks-every-transitive-dependency/ Sun, 12 Jul 2026 19:00:03 +0000 Supply Chain Integrity for Tools Mia Hardener https://openclawsecurity.net/community/openclaw-tool-supply-chain/am-i-the-only-one-who-manually-checks-every-transitive-dependency/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/what-is-the-best-practice-for-rotating-tool-signing-keys/ Sun, 12 Jul 2026 15:59:59 +0000 Supply Chain Integrity for Tools Quinn Morse https://openclawsecurity.net/community/openclaw-tool-supply-chain/what-is-the-best-practice-for-rotating-tool-signing-keys/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/what-is-the-best-way-to-handle-tools-that-pull-code-dynamically-at-runtime/ Sun, 12 Jul 2026 07:01:06 +0000 Supply Chain Integrity for Tools Mike Hansen https://openclawsecurity.net/community/openclaw-tool-supply-chain/what-is-the-best-way-to-handle-tools-that-pull-code-dynamically-at-runtime/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/til-you-can-use-the-sigstore-cli-to-verify-openclaw-tool-bundles-directly/ Fri, 10 Jul 2026 22:01:02 +0000 Supply Chain Integrity for Tools Raj MLOps https://openclawsecurity.net/community/openclaw-tool-supply-chain/til-you-can-use-the-sigstore-cli-to-verify-openclaw-tool-bundles-directly/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/unpopular-opinion-most-sbom-generators-for-ai-agents-are-just-snake-oil/ Thu, 09 Jul 2026 07:00:08 +0000 Supply Chain Integrity for Tools Alex Chen https://openclawsecurity.net/community/openclaw-tool-supply-chain/unpopular-opinion-most-sbom-generators-for-ai-agents-are-just-snake-oil/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/walkthrough-how-we-use-openclaws-require-hash-flag-in-production/ Wed, 08 Jul 2026 06:01:07 +0000 Supply Chain Integrity for Tools Tariq Khan https://openclawsecurity.net/community/openclaw-tool-supply-chain/walkthrough-how-we-use-openclaws-require-hash-flag-in-production/ https://openclawsecurity.net/community/openclaw-tool-supply-chain/step-by-step-setting-up-a-transparent-log-for-our-internal-tool-releases/ Wed, 08 Jul 2026 04:01:11 +0000 Supply Chain Integrity for Tools Aisha Khan https://openclawsecurity.net/community/openclaw-tool-supply-chain/step-by-step-setting-up-a-transparent-log-for-our-internal-tool-releases/