Openssf
2 tutorials in this category.
01
Known-malicious blocks
Why Chainsaw blocks known-malicious package installs at the proxy before policy evaluation, what data backs the gate, and the supported false-positive path.
01
How to Detect Known Malware in Your Supply Chain
Understand Chainsaw's malware index powered by OpenSSF data, review malware detections, and configure automatic blocking of malicious packages.