Security Engineer
hardsecurity-engineer-supply-chain
What is software supply chain security and how do you reduce risk?
Answer
Supply chain security protects builds and dependencies.
Practices:
- Pin and verify dependencies
- Use SBOMs
- Signed builds and provenance
- Restrict CI permissions
Also monitor for typosquatting and compromised packages and have a fast patch/rollback process.
Related Topics
Supply ChainDevSecOpsSecurity