Jack Cable of CISA and Zach Steindler of GitHub Dig Into Package Repository Security

od What's in the SOSS? An OpenSSF Podcast