{"as_of":"2026-08-08T12:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f12e9cd45812046c1d97f10f6aa86c7d6cca5eb21100106cf68f84a299dc2450","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:57:46.420783Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.06478/citation-record","integrity":"/paper/2506.06478/integrity","json":"/paper/2506.06478/citation-record.json","paper":"/paper/2506.06478"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.695972Z","title":"SLSA: Supply-chain Levels for Software Artifacts","venue":null,"work_id":"3f35ad08-a449-4ff8-abe1-9ee723098818","year":2025},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.346520Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:359cbb5c324f3d54b06a1a087af268da51d45296c05290642cfdd687cf132017","observation_id":"04052ecf-0013-4f2e-b148-d04de9cfc877","resolution":{"observed_at":"2026-08-07T05:57:46.699370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.686214Z","title":"in-toto: Providing farm-to-table guarantees for bits and bytes,","venue":null,"work_id":"6425525f-f8cd-442f-869f-4a7136826e45","year":2019},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.350538Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:5c53ff7696f5f2c6a3f2678c5de7bf4ff38fb5a3813634709923e45860c4686e","observation_id":"5ed0d465-1840-43a1-94c4-b217deb363ff","resolution":{"observed_at":"2026-08-07T05:57:46.689249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.676094Z","title":"An integrity-focused threat model for software development pipelines,","venue":null,"work_id":"ae6b9f7d-93c8-462c-bdf7-83d3c157bd0f","year":2022},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.353631Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:5730bbd002b9bcd914ba365f24f79952774a40e1c9c86b57e1abdc0644fa699e","observation_id":"77ecbd03-6571-4105-bebc-917d05d22afd","resolution":{"observed_at":"2026-08-07T05:57:46.679503Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.665533Z","title":"Ambush from all sides: Understanding security threats in open-source software ci/cd pipelines,","venue":null,"work_id":"3853a8ba-a5ad-4a5b-be10-c35c9ec9a97c","year":2024},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.356513Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:d6cc1bfdab7b8e1bfc34b12a23857c499db86c78b034c9144053431814ef8f05","observation_id":"e0351aac-17c4-4026-adbe-8f0e9618b21d","resolution":{"observed_at":"2026-08-07T05:57:46.668904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.655066Z","title":"Analyzing challenges in deployment of the slsa framework for software supply chain security,","venue":null,"work_id":"4d880235-fa01-42cf-9e68-988b93fc3dbe","year":2024},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.359524Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:8eceb85e5235742143f9e23aa0cad8517b2c6f05a66707f37dbc6f1b0ab348d6","observation_id":"700b7d97-c629-43ea-aae8-d31e89f8197c","resolution":{"observed_at":"2026-08-07T05:57:46.658353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.645053Z","title":"Argo-slsa: Software supply chain security in argo workflows,","venue":null,"work_id":"a142bad4-2254-4446-af80-2f3572bf80a8","year":2024},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.362707Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:285c523f48c3f0b9d4a16fe0678cb79adc0b6ba4de747ef9a03728ca94da0c9d","observation_id":"a666ed2e-b376-4b06-9e04-49c074c551bd","resolution":{"observed_at":"2026-08-07T05:57:46.648376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.634305Z","title":"An industry interview study of software signing for supply chain security,","venue":null,"work_id":"aa6f8e5a-378b-4078-8995-2012411e2a4c","year":2024},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.365684Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:f1f2d8657e0fb310ab9ba6fda3fc90bdb9e7487bc9885207e4ce17fffbc64a40","observation_id":"56a64793-f842-4d7e-8091-4fe93763d2af","resolution":{"observed_at":"2026-08-07T05:57:46.637909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.624233Z","title":"Research directions in software supply chain security,","venue":null,"work_id":"2bd0da94-d054-4172-9fdb-8b6d51d13db7","year":2025},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.368429Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:aab6d70546c593da433c9a2fe2656a782de9ba73c9f76f6c6f87bdbba1d5a6fd","observation_id":"d7b0890c-c485-4cff-b29f-b9ddd43481e5","resolution":{"observed_at":"2026-08-07T05:57:46.627554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.614022Z","title":"Codecov bash uploader security update","venue":null,"work_id":"0937e902-6852-4bcc-87b8-3d98b4efab5c","year":2021},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.371110Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:33d4edf51eb644625241ed63b1e8704095cecad1e630fd421ce7bcf8524715b2","observation_id":"577c5ef5-da5a-4531-a1cf-12dafc9a1760","resolution":{"observed_at":"2026-08-07T05:57:46.617397Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.603817Z","title":"January 4, 2023 - security alert","venue":null,"work_id":"e72aae97-6baf-475f-9034-a1d8cd61ff18","year":2023},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.373885Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:d249c72f56a4f42af9cb891642649481908b2bfbd31a183fdc8ca2e83be07985","observation_id":"4c80bab8-d3d4-4afe-8c48-726aeb84be60","resolution":{"observed_at":"2026-08-07T05:57:46.607104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.593335Z","title":"Xcodeghost malware analysis","venue":null,"work_id":"295cfdaf-5726-4899-a81e-d337affdc866","year":2015},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.376851Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:5603b2b0f9e7110975c1f82d7df08522c0851a4b7401ee9c0f6e0aea7454452e","observation_id":"73ee7c7d-71e1-4a90-a279-b779df6f392c","resolution":{"observed_at":"2026-08-07T05:57:46.596598Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.583069Z","title":"Sunburst malware technical analysis","venue":null,"work_id":"b57ae37f-6073-46d9-81e0-ebdd0aa58848","year":2020},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.379704Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:dd41a4528937d034f0ff24f1637dd891362c0f7b75c606a99498e75667bacfde","observation_id":"d10119c1-a35b-40ee-b282-1113b0b84a7e","resolution":{"observed_at":"2026-08-07T05:57:46.586297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.573330Z","title":"Php git server breach","venue":null,"work_id":"c2d9126a-ed27-4818-9f9a-3bbe50189733","year":2021},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.382529Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:8c31abccaa139737084f44daf4142b64b172e8019fbc2eca577d3474272fdc2e","observation_id":"adf5520a-a75f-4e46-916d-c1934ff5ac0b","resolution":{"observed_at":"2026-08-07T05:57:46.576296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.563512Z","title":"Security incident disclosure","venue":null,"work_id":"9e1931fa-ccfd-4e8f-a8b5-82e2edc84f39","year":2021},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.385456Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:4e0aac4afb5aa5148d774c66943801ec90031740ad6d7a6884544469a4711fa5","observation_id":"c86cb062-5184-4dfd-8356-4db26d30f719","resolution":{"observed_at":"2026-08-07T05:57:46.566541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.553148Z","title":"Event-stream npm supply chain attack","venue":null,"work_id":"bc5167a3-0878-47b5-902a-e62d25758e61","year":2018},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.390964Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:785619f6fffbfea460e62d34ec8109ff073afa0590c1ca21540301e97c34aedb","observation_id":"931c970a-accd-48c5-b37d-044a6a0ecef2","resolution":{"observed_at":"2026-08-07T05:57:46.556352Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.543379Z","title":"Jetbrains teamcity servers under attack","venue":null,"work_id":"4d2637e9-72b5-4fb8-a778-a3dfae84e56b","year":2020},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.393903Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:1e4ebbc3e48ba397b472721a2535fb23f13c9aca6ba03675b833d3fa56051e18","observation_id":"6382f561-0054-45b7-82e1-ae2a4d6bc01b","resolution":{"observed_at":"2026-08-07T05:57:46.546468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.532862Z","title":"Uber aws credentials leak","venue":null,"work_id":"bfbd4be4-a2a3-483d-9682-cec8dccdaca8","year":2016},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.397060Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:3c225f9c6e2d2dfed3004851199fb4862be7691a8e91816b8785d3b91dcd0366","observation_id":"cf45308b-be5d-4625-a34e-c6850fc42571","resolution":{"observed_at":"2026-08-07T05:57:46.536204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.522574Z","title":"Github oauth compromise","venue":null,"work_id":"cba97f51-b14d-49b0-abb8-f8e7e1329f5a","year":2022},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.399770Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:4fd5a5450901481002b14243a7058dfca890d95f9f20c1113627d3a44c57d8dc","observation_id":"acb3b610-104d-4808-8482-3b9d3b9ae746","resolution":{"observed_at":"2026-08-07T05:57:46.525880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.512556Z","title":"Slack github token breach","venue":null,"work_id":"5b616755-7e1c-42a0-8504-6cc433b6274c","year":2015},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.402683Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:f17d5cf52cc2e56f1ba41fa088e0b40eb9950bce83cb099a4b1eb2a4394e9d41","observation_id":"3e1fe5f6-7612-4766-80c8-d440852faec9","resolution":{"observed_at":"2026-08-07T05:57:46.515806Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.501802Z","title":"Crypto mining via github actions","venue":null,"work_id":"0b398102-5041-450a-9c26-74bda3ab7701","year":2021},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.405251Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:56e20c778cd34aee8fab8681f8f4ba6d4b5d378d913529033b33c9c2bc21fbb1","observation_id":"e0541c87-e7f8-405b-8ef1-9beb876cb250","resolution":{"observed_at":"2026-08-07T05:57:46.505250Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.490922Z","title":"Malicious campaigns overwhelm npm","venue":null,"work_id":"5c482b4b-8910-406f-903e-a9f15e8a64b4","year":2022},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.407892Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:f48a32d0bee07bd75faa594d3080f2b14a3b29ee28c0b26e5ebfc6282824d76a","observation_id":"3c189f99-6918-4ba1-a1fd-933999346a49","resolution":{"observed_at":"2026-08-07T05:57:46.493937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.480484Z","title":"Pypi flooding attack","venue":null,"work_id":"402fbbaf-b78f-4907-a080-63710924c12e","year":2022},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.411590Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:e998fdfa756934712b595e2c4eaca2556e7a6ffa060b17e30128fac61e364f59","observation_id":"4e0cba1a-5f2c-49b0-9de5-49a7f03d11fe","resolution":{"observed_at":"2026-08-07T05:57:46.483946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.470138Z","title":"Github actions pull_request_target rce","venue":null,"work_id":"570e3f65-fd72-487c-8e7a-c31dd00a6a77","year":2021},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.414840Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:1ae9d751f986ae6ff062cefa9ba1f8f875883494660f27dbd0f976baf54d72c0","observation_id":"fe817320-35ad-42db-a40d-9a4c6bd5e6fb","resolution":{"observed_at":"2026-08-07T05:57:46.473359Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.459342Z","title":"Travis ci misconfigured permissions","venue":null,"work_id":"ef345f60-2590-4ab3-93b7-7395e3467f8f","year":2021},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.417920Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:fcfce2b86abf166a057ee68b83d671ca1fce8445f0d4644c1f40fc5640224f6c","observation_id":"e34c34b7-1786-40ba-9599-cc75ee189104","resolution":{"observed_at":"2026-08-07T05:57:46.462627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:57:46.446395Z","title":"Azure devops zero click ci/cd vulnerability","venue":null,"work_id":"38d5da95-44ff-49da-a3b6-43ce200fd7a3","year":2022},"citing_paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:57:46.420783Z"},"links":{"citing_paper":"/paper/2506.06478"},"observation_digest":"sha256:590953e72d46b5817498045db2a998f40b6e9aee14edc070e42d0f1deb0f6e20","observation_id":"034558d2-62fa-4815-9aad-69da4a20f4f4","resolution":{"observed_at":"2026-08-07T05:57:46.451378Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.06478","last_updated":"2025-06-06T19:06:59Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-07T05:53:28.955113Z","submitted_at":"2025-06-06T19:06:59Z","title":"Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":25},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2506.06478."}