Supply Chain Compromise #

Malicious or tampered software enters the build via compromised dependencies, base images, or third-party tooling.

Mapped Controls

• Binary Provenance
• Dependency Management
• Toolchain
• Security Vulnerability Scanning