The Software Supply Chain

Everything you ship that you did not write: dependency risk and the compromises that exploit it, secrets that escape into repositories and images, hardening the pipeline that has credentials to everything, container and image security, and proving what is actually in a build.