supply-chain-security 2 Beyond Declarative Allowlists: Escaping Workflow and Git Boundaries in Automated Pipelines Aug 14, 2026 Shift-Left Meets Shift-Node: Moving Container Supply Chain Verification to Runtime via NRI Jul 31, 2026