Free book

Software Supply Chain Security

Reading access

Free book

A modern software supply chain security book covering dependency risk, SBOMs, provenance, signed artifacts, SLSA concepts, CI/CD hardening, secrets, package registries, and release integrity.

Level: advancedLanguage: EN EnglishRating: 0Reviews: 0

Technology Security Books Security DevOps GAUAB Academy Security Books Software Supply Chain

Book

Book contents

01Chapter 1: How Software Supply Chains Are Attacked 02Chapter 2: Dependencies, Registries, and Package Trust 03Chapter 3: Build Systems, CI Runners, and Release Risk 04Chapter 4: Threat Modeling the Delivery Pipeline 05Chapter 5: Lockfiles, Pinning, and Dependency Review 06Chapter 6: SBOMs and Vulnerability Management 07Chapter 7: Artifact Signing and Provenance 08Chapter 8: Secrets Management in CI/CD 09Chapter 9: SLSA Concepts and Practical Adoption 10Chapter 10: Container Image Security and Scanning 11Chapter 11: Policy Gates and Release Approvals 12Chapter 12: Incident Response for Compromised Dependencies 13Chapter 13: Harden a Node.js Release Pipeline 14Chapter 14: Add SBOM and Artifact Signing 15Chapter 15: Create a Dependency Upgrade Workflow 16Chapter 16: Build a Supply Chain Security Checklist 17Appendix E: Deeper Practice and Extra Examples

Reviews

No approved reviews are visible yet.

Featured Books

ENEnglishFree

advanced

Synthetic Threat Matrix

Technology Business AI Security Threat

0 / 0 ReviewsOpen

ENEnglishFree

advanced

De Risking Black Box

Technology Business Security Risking Black

0 / 0 ReviewsOpen

ENEnglishFree

advanced

Low Latency Executive

Technology Business Cloud Latency Executive

0 / 0 ReviewsOpen

Discussion

0 comments

No approved comments are visible yet. New community replies may wait for moderation.