Tag: supply-chain
Browse 3 practical software engineering resources tagged with "supply-chain". Discover code recipes, design patterns, documentation templates, and in-depth guides to help you build, deploy, and maintain production-ready solutions involving supply-chain. Each resource is written for engineers who ship real systems, with copy-paste examples and practical trade-offs.
Software Supply Chain
The software supply chain includes all the components, tools, and processes that build and deliver software. Securing it is essential for supply chain integrity.
The resources below cover SBOMs, dependency scanning, signing, and provenance. Each guide helps you secure your supply chain.
Every resource includes clear explanations, copy-paste code, and practical warnings. Use them to make informed decisions, avoid production pitfalls, and speed up your delivery. If you are just getting started, read the beginner-friendly articles first; if you are experienced, jump straight to the advanced patterns and architecture guides. New resources are added regularly, so bookmark this page and check back for the latest patterns.
CI/CD Pipeline Security Template
A template for securing build and deployment pipelines against credential leaks, tampering, supply...
Third-Party Dependency Audit Template
A template for auditing third-party dependencies: license compliance, security vulnerabilities,...
CI/CD Security: Harden Your Pipelines and Prevent Supply
A practical guide to securing CI/CD pipelines: secrets management, least-privilege runners,...