A supply-chain attack targets Linux servers with disk-wiping malware hidden in Golang modules published on GitHub. The campaign was detected last month and relied on three malicious Go modules that ...

Community driven content discussing all aspects of software development from DevOps to design patterns. In a previous git submodules tutorial, I added submodules to a stand-alone repository. There was ...

Risk vector: Package managers like npm, pip, Maven, and Go modules all enable pulling dependencies directly from GitHub repositories instead of official registries. Attack surface: Using mutable ...

Community driven content discussing all aspects of software development from DevOps to design patterns. The manner in which you remove a Git submodule has changed since earlier versions of the tool, ...