https://www.theverge.com/2022/8/30/23328977/google-open-source-bug-bounty-supply-chain-hacks-dependencies
Google’s new program offers security researchers money if they find vulnerabilities in its open-source projects or the libraries those projects depend on.
Create an account or login to join the discussion