Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Root in One Request: Marimo's Critical Pre-Auth RCE (CVE-2026-39987)
Blog

Root in One Request: Marimo's Critical Pre-Auth RCE (CVE-2026-39987)

Apr 9, 2026
Ebook/Report

Malware in Open Source Ecosystems

Apr 1, 2026
Blog

Axios compromised: hijacked maintainer account pushes malicious npm versions

Mar 30, 2026
Ebook/Report

A Practitioner’s Guide to Responding to the TeamPCP Supply Chain Attacks

Mar 27, 2026
Show filters
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
CI/CD
Security
Blog

PWN Request Threat: A Hidden Danger in GitHub Actions

Sep 3, 2024
SCA
Security
Blog

Address Open Source Risks with Endor Labs

Aug 27, 2024
SCA
Developer Productivity
Blog

Give Devs the Confidence to Fix: Making Remediation Less Painful

Aug 21, 2024
Security
SCA
Blog

Endor Labs Partners with Microsoft to Strengthen Software Supply Chains

Aug 21, 2024
No items found.
Blog

Prioritize Open Source Risks with Endor Labs

Aug 19, 2024
SCA
Security
Blog

Discover Open Source Risks with Endor Labs

Aug 14, 2024
Open Source
SCA
Blog

48 most popular open source tools for npm applications, scored

Aug 9, 2024
SCA
Security
Tech
Developer Productivity
Compare Endor Labs and Snyk GitHub Apps.
Blog

Benchmarking Endor Labs vs. Snyk’s GitHub Apps

Aug 8, 2024
CI/CD
Security
Compliance & SBOM
Blog

Using Artifact Signing to Establish Provenance for SLSA

Aug 8, 2024
SCA
Open Source
Developer Productivity
Fixed is Better than Found | Upgrades & Remediation with Endor Labs
Solution Brief

Fixed is Better than Found | Upgrades & Remediation with Endor Labs

Aug 7, 2024
Developer Productivity
SCA
Video

How to Fix Vulnerabilities Without Breaking Changes

Aug 7, 2024
SCA
Security
News
Developer Productivity
Blog

Introducing Upgrades & Remediation: Give Developers the Confidence to Fix

Aug 7, 2024
Security
SCA
Static SCA vs. Dynamic SCA: Which is Better and Why
Blog

Static SCA vs. Dynamic SCA: Which is Better (and Why It's Neither)

Aug 1, 2024
Open Source
Blog

33 Most Popular Open Source Tools for Maven Applications, Scored

Jul 29, 2024
SCA
Security
Tech
Customer Story

Jellyfish Enables Data-Driven AppSec with Endor Labs

Jul 24, 2024
Security
SCA
Blog

Under the Hood: Jellyfish’s Data-Driven Security Program

Jul 24, 2024
Security
What's a Security Pipeline? - On-Demand Webinar
Video

What's a Security Pipeline? - On-Demand Webinar

Jul 17, 2024
SCA
Open Source
Developer Productivity
CI/CD
Compliance & SBOM
Secure Everything Your Code Depends On | Endor Labs
Solution Brief

Secure Everything Your Code Depends On With Endor Labs

Jul 16, 2024
News
Blog

Endor Labs Receives Strategic Investment from Citi Ventures

Jul 15, 2024
News
We made the Inc. Best Workplaces List for 2024!
Blog

We made the Inc. Best Workplaces List for 2024!

Jul 8, 2024
Security
Open Source
Blog

New CocoaPods CVEs: Swift and Objective-C Supply Chains Are Fragile

Jul 3, 2024

Want to stay in the loop?

Sign up for our newsletter.

Welcome to the resistance
Oops! Something went wrong while submitting the form.