Dependency Confusion - CI/CD Glossary Definition
Dependency confusion is a supply-chain attack where an attacker publishes a public package matching the name of a company’s private one, so a misconfigured resolver fetches the malicious public version; scoped registries and pinning defend against it.
Related guides
Typosquatting - CI/CD Glossary DefinitionTyposquatting publishes malicious packages under names that misspell popular ones, so a single typo in a depe…
Lockfile Integrity - CI/CD Glossary DefinitionLockfile integrity records a cryptographic hash per dependency, so a CI install fails loudly if a fetched pac…
Checksum Verification - CI/CD Glossary DefinitionChecksum verification recomputes a downloaded file’s hash and compares it to a trusted value, confirming the…