Skip to content

Add missing punctuation to A03_2025-Software_Supply_Chain_Failures.md #834

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add missing punctuation to A03_2025-Software_Supply_Chain_Failures.md #834

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions 2021/docs/en/2025/A03_2025-Software_Supply_Chain_Failures.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,8 +89,8 @@ There should be a patch management process in place to:
* Only obtain components from official (trusted) sources over secure links. Prefer signed packages to reduce the chance of including a modified, malicious component (see [A08:2025-Software and Data Integrity Failures](https://owasp.org/Top10/A08_2021-Software_and_Data_Integrity_Failures/)).
* Deliberately choosing which version of a dependency you use and upgrading only when there is need.
* Monitor for libraries and components that are unmaintained or do not create security patches for older versions. If patching is not possible, consider deploying a virtual patch to monitor, detect, or protect against the discovered issue.
* Update your CI/CD, IDE, and any other developer tooling regularly
* Treat components in your CI/CD pipeline as part of this process; harden them, monitor them, and document changes accordingly
* Update your CI/CD, IDE, and any other developer tooling regularly.
* Treat components in your CI/CD pipeline as part of this process; harden them, monitor them, and document changes accordingly.


There should be a change management process or tracking system in place to track changes to:
Expand Down