Software supply chain attacks went from theoretical to routine in the past few years. SolarWinds, Log4Shell, the xz backdoor -- each one taught the industry that the code you depend on is the code you're vulnerable through. Here's how to actually defend against this with SBOMs, signing, and the SLSA framework.
Engineering Craft
TypeScript, CI/CD, databases, observability -- the skills that make code production-ready.
