Software Supply Security Education 1 article

Software supply chain security examines the risks that can enter applications through dependencies, build processes, and distributed artifacts. Learners explore package provenance, vulnerability assessment, software bills of materials, signing, and the risks of compromised tooling; defenses involve reviewing what enters a project and how artifacts are distributed. Dependency tracking, build integrity, and artifact provenance are practical concerns when assessing software supply chain threats.

Learning Guides

November 3, 2026, 6:36 AM 6 mins read

Understanding Git SSH Signature Verification and Trust Files

Git SSH signature verification ensures that a commit was signed by a specific key, but confirming the key's owner depends on the repository's trust file. Learn how allowed signers files work and why they matter for secure development workflows.