ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions. - Siddharth Muralee; Igibek Koishybayev; Aleksandr Nahapetyan; Greg Tystahl; Bradley Reaves; Antonio Bianchi; William Enck; Alexandros Kapravelos; Aravind Machiry (USENIX Security Symposium, 2023)

S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. - Greg Tystahl; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

An Empirical Study on Reproducible Packaging in Open-Source Ecosystems. - Giacomo Benedetti; Oreofe Solarin; Courtney Miller; Greg Tystahl; William Enck; Christian Kästner; Alexandros Kapravelos; Alessio Merlo; Luca Verderame (ICSE, 2025)

Research Directions in Software Supply Chain Security. - Laurie A. Williams; Giacomo Benedetti; Sivana Hamer; Ranindya Paramitha; Imranur Rahman; Mahzabin Tamanna; Greg Tystahl; Nusrat Zahan; Patrick Morrison; Yasemin Acar; Michel Cukier; Christian Kästner; et al. (ACM Trans. Softw. Eng. Methodol., 2025)