Links
[artigo] Opening Pandora’s box - Supply Chain Insider Threats in Open Source projects
[artigo] Docker Security – Step-by-Step Hardening (Docker Hardening) (um dos guias mais completos que já vi)
[ferramenta] Secret scanning AI-generated custom patterns (public beta) by Github
[processo] CISA Secure Software Development Attestation Form
[repositório] Awesome Product Security