AN OVERVIEW OF SOFTWARE SUPPLY CHAIN SECURITY

Summary from the TLDR InfoSec newsletter

This is a two-part deep-dive into supply chain security and the various aspects involved. Part 1 provides an overview of three phases of the software supply chain: source, build and deployment, and package, and discusses the risks and processes for securing each stage. Part 2 is a comprehensive analysis of 12+ SSC vendors and their core differentiators within the software development lifecycle.