SLSA

DevSecOps

Software Supply Chain Incidents: Dependency Pinning, Provenance and Recovery

Understand software supply chain security: threat model, setup, safe verification and security operations checklist.