Supply-chain security at scale
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
protect what teams build from and ship.
Planned topics
- Risks: vulnerable or malicious dependencies, tampered build steps, untrusted images.
- Controls: dependency pinning and scanning, software bill of materials, signed artifacts, protected build pipelines.
- Centralize in the shared pipeline so every team inherits it.
- Verify tool and standard versions before recording them.
Draft outline details
Demonstration
a pipeline diagram marking where scanning, signing, and provenance checks run.
Check your understanding
Why centralize supply-chain controls in the shared pipeline?
Show answer
Every team inherits them without separate work.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.