Threat Intelligence Ingestion

Consuming a malware feed at GitHub's scale bills out in rip-outs and credential rotation

The engineer running Dependabot across 30 million repositories says wiring in OpenSSF's malicious-package feed was the cheap part, while normalization ate the budget and each alert ends in a build-credential incident.