TAG
#software supply chain
Stories connected through a shared idea, actor, technology or theme.
Microsoft APM 0.30.0 hardens agent package installation and cache lifecycleAPM 0.30.0 adds checksum verification before Unix archive extraction, owner-aware unprivileged installation and a Homebrew-first macOS onboarding path. It also fixes cache-pruning correctness, improves release lookup recovery and runs CodeQL on merge-queue commits.→Broadcom launches TrueSource for verifiably built open-source softwareTrueSource combines Spring Enterprise with clean-room builds across Java, Python and Node.js, hardened container images, and trusted data services for PostgreSQL, RabbitMQ, MySQL and Valkey. Its tooling scans repositories, assesses release blast radius, proposes lower-risk remediation pull requests and provides security dashboards.→