Securing CI/CD for an open source project: Controlling who runs what
…CNCF projects highlighted in this post Part one The last twelve months have been rough on the open source supply chain. Axios was compromised on npm and shipped a remote access trojan…