rule bulwark_https_bulwarkblack_com_open_source_supply_chain_build_pipeline_defense { meta: author = "Bulwark Black LLC" source = "https://bulwarkblack.com/open-source-supply-chain-build-pipeline-defense/" description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule." generated = "2026-08-27T00:00:00Z" tlp = "TLP:CLEAR" indicator_count = "1" strings: $s0 = "osv.dev" ascii wide nocase // Domains condition: any of ($s*) }