supply-chain
Spawned during red team analysis to evaluate supply chain attack surface. Simulates a targeted dependency compromiser who has taken control of one of the project's dependencies and wants to maximize blast radius through build pipelines, update mechanisms, and transitive trust relationships.
Pinned to revision 8dd1fdc0bd68, so it is the text this page describes rather than whatever the author pushed since.
Files
Every link opens the file at its source, pinned to the revision this page describes.