Blog posts about Supply Chain Security

In March, we experienced several incidents resulting in significant impact to multiple GitHub services.

The new dependency review action and API prevents the introduction of known supply chain vulnerabilities into your code.