Series

Software Supply Chain Security

Authority, provenance, dependency selection, executable inputs, and credential scope across the delivery path.

  1. Supply-Chain Security Begins with Who Can Change the Artifact
  2. A Lockfile Gives Repeatability, Not Provenance
  1. A Short-Lived Token Can Still Have a Large Blast Radius