@joshbressers: "If you can't search your past builds, you can't bound your blast radius.

[anchore@mstdn.business]

@joshbressers: "If you can't search your past builds, you can't bound your blast radius. SBOMs turn a frantic morning into a simple query."

His zero-day incident response story from inside Anchore's response to the NPM supply chain attack:

A Zero-day Incident Response Story from the Watchers on the Wall | Anchore

Learn about the npm supply chain attack and the response to zero-day vulnerabilities in the software community.

Anchore (anchore.com)