Native aarch64 Arch Linux (ALARM) dev container for Apple Silicon — PowerShell lifecycle scripts, key-based SSH, use-case samples, and CI-built GHCR images.
Read-only PowerShell scanner for the DAEMON Tools supply chain attack disclosed by Kaspersky on 2026-05-06.
Evidence-first prompt toolkit for AI-assisted supply chain security audits across npm, Composer, CI/CD, GitHub Actions, Next.js, Vercel, TanStack, containers, SaaS/OAuth and LGPD incident response.
Detect CVE-2025-54313 eslint-config-prettier supply chain attack IOCs on Windows
Package-aware supply-chain hardening for Claude Code and VS Code: a shareable settings posture plus a skill to apply and document it.
PowerShell forensic toolkit for auditing Node.js development environments. Detects npm supply chain attacks, hidden task execution, and obfuscated malware processing.
Before you run AI-generated or downloaded code: a local-first Windows scanner that flags hidden Unicode payloads, auto-run scripts, and malicious AI-agent configs — with a 🔴/🟡/🟢 verdict. No install, nothing leaves your PC.
Parse VS Code extension install/update/removal history from shared process logs across multiple editors
Add a description, image, and links to the supply-chain-security topic page so that developers can more easily learn about it.
To associate your repository with the supply-chain-security topic, visit your repo's landing page and select "manage topics."