Unveiling Bagel: Why Your Developer's Laptop is the Softest Target in Your Supply Chain
TL;DR We're releasing bagel, an open-source CLI that inventories security-relevant metadata on...
Here we’ll offer information relevant to developers and security automation for the software supply chain.

This free guide explores the business level risks of the software supply chain and offers examples for how they materialize. We'll review four key risk categories; your developers, 1st party code, 3rd party code and the development infrastructure, and break down specific vulnerabilities and how they're compromised in each category.

Is BoostSecurity right for you? What problem do you solve? Read more in our Executive Summary / At-a-Glance document, in the PDF below.

TL;DR We're releasing bagel, an open-source CLI that inventories security-relevant metadata on...
December 8th 2025, by François Proulx, VP of Security Research @ BoostSecurity.io TL;DR: 2025...
TL;DR: Malicious code caching, dangling commits, pseudo-versions stealthily pointing to...
