New SLSA++ Survey Reveals Real-World Developer Approaches to Software Supply Chain Security - Open Source Security Foundation

Answering even basic questions about software supply chain security has been surprisingly hard. For instance, how widespread are the different practices associated with software supply chain security? And do software professionals view these practices as useful or not? Easy or hard? To help answer these and related questions, Chainguard, the Eclipse Foundation, the Rust Foundation, and the Open Source Security Foundation (OpenSSF) partnered to field a software supply chain security survey.

The ultimate guide to software supply chain security

What Are Supply Chain Levels for Software Artifacts (SLSA)?

Elastic partners with Chainguard on Software Supply Chain security

SLSA++ Survey of Software Supply Chain Security Practices and Beliefs

Improving Software Security with Profisea: Why Incorporate Supply

Everybody SLSA!!. How Google Cloud can help you secure…

Google security overview, Documentation

Google vets fix software supply-chain security at Chainguard - Protocol

Blog Archives - Page 11 of 20 - Open Source Security Foundation

The Journey to Secure the Software Supply Chain at Microsoft

Supply Chain Security Begins with Secure Software Development

Supply Chain Security: Secrets and Modern Security Frameworks

NSA, CISA, ODNI Release Software Supply Chain Guidance for

ReversingLabs State of Software Supply Chain Security Report

Improving Software Security with Profisea: Why Incorporate Supply