Software supply-chain security domain repository delivering modular components for artifact signing, build attestation, provenance tracking, SBOM generation, policy enforcement, and runtime integrity — designed to enable verifiable, tamper-resistant delivery pipelines.
supply-chain provenance build-system vulnerability-management software-supply-chain reproducible-builds key-management security-engineering binary-transparency runtime-security secure-by-design policy-enforcement sbom tamper-detection risk-scoring supply-chain-security transparency-log artifact-signing domain-repository
-
Updated
Feb 12, 2026 - Python