أمان سلسلة التوريد على نطاق واسع

في هذا الدرس

protect what teams build from and ship.

الموضوعات المخطط لها

• Risks: vulnerable or malicious dependencies, tampered build steps, untrusted images.
• Controls: dependency pinning and scanning, software bill of materials, signed artifacts, protected build pipelines.
• Centralize in the shared pipeline so every team inherits it.
• Verify tool and standard versions before recording them.