Post

So to over simplify, the gov guidance was "have you tried not writing insecure code?" i.e. using project management tools (priorities, project phase gates, etc) to solve a technical problem (finding bugs & fixing them before someone exploits them)

https://swagitda.com/blog/posts/securing-the-supply-chain-of-nothing/