Google pairs GUAC with SLSA to take a bite out of software supply chain insecurity - ReversingLabs

Dip into this tasty repo: Google is putting its weight behind a project to offer a comprehensive view of your software. Enter GUAC: Graph for Understanding Artifact Composition.

3/ It’s an #OpenSource project. In this week’s #SSBlogwatch we go to @GitHub and check it out.

For @ReversingLabs’ @SecuredSoftware: https://t.co/wg73kjbuK4

— @Richi 🤓 Jennings (@RiCHi) October 26, 2022