TUF for Humans: Explaining software update security

11 minute read Published: Author: Christopher Gervais

For the past few months, we’ve been working with the Drupal Association on a project to enhance the security of the Drupal.org software repository. The most succinct way of describing this project is:

Securing automated software deployments from supply chain attacks.

Recently, on a long drive with my mother, I tried to explain this project to her. She is probably the least technical person I know. This may sound like the common tech trope, but it’s not. This has nothing to do with …