SEC-06

Software Supply-Chain Pipeline

Generate an SBOM, scan dependencies and containers, sign artifacts, verify provenance, and block policy violations.

• Status: planned
• Proof: code
• Tier: focused-exhibit
• Roles: ai-engineer, backend-engineer, full-stack-engineer

← All projects