Blog post: The real weakest link in software supply chain security

[rebeccadee]

PREVIEW: https://deploy-preview-5205--sourcegraph.netlify.app/blog/real-weakest-link-in-software-supply-chain-security/

https://app.asana.com/0/1199959077348208/1200076936776936/f

[sourcegraph-bot]

Notifying subscribers in CODENOTIFY files for diff 4fa93f2...0fc8a08.

Notify	File(s)
@sourcegraph/marketing	blogposts/2022/third-party-vulnerabilties-process.md website/.vscode/settings.json website/.vscode/tasks.json website/tsconfig.json

[rebeccadee]

@nickmyyz I will pop in tomorrow to add the images and resolve outstanding todos, but would be super helpful to get an approving review from you in the meantime so I'm not blocked from merging tomorrow AM! 🙏 TY!

[nickmyyz]

I read it over again and still think it's ready to go (minus the to-dos of course)! The only thing I might take a look at is whether you could add more paragraph breaks here and there (the intro paragraph for example is a bit long) but I wouldn't consider that blocking.

[rebeccadee]

Thank you so much @nickmyyz!

Also looping in @andreeleuterio just as an FYI – this is almost ready to go and I plan to publish tomorrow 🎉

[rebeccadee]

@nickmyyz / @andreeleuterio I didn't realise that making further changes to the PR would invalidate the previous approval 🙄 Would one of you be able to approve and merge today please? 🙏 I understand why we want to enforce reviews before merging but this is proving to be a bit of a pain!!

[andreeleuterio]

@rebeccadee I got you

[rebeccadee]

@andreeleuterio Thanks for approving! I meant for this to be published as well, but seeing as it's not live yet I added a mention of the node-ipc attack. I just want to run the post by our comms team because of the relationship to current events. Stay tuned!