Supply chain · Advanced
Your software supply chain: the dependencies you inherit
Modern software relies on components and services created by many organizations. That network is part of your security boundary.
Map the dependencies
Track direct and transitive components, build systems, publishing credentials, and external services.
Assess the trust points
A compromised maintainer account or build process can deliver malicious code through a normal update path.
Reduce the blast radius
Protect build credentials, verify artifacts, review dependency changes, and maintain a response process for affected releases.