DevSecOps & supply chain
Provenance and the dependency-confusion threat model are durable and increasingly load-bearing. Standards are still moving.
Layer 24 entities0 started
Entities
Section titled “Entities”sbom
Not started. Becomes a package with its own syllabus once it begins.
slsa
Not started. Becomes a package with its own syllabus once it begins.
artifact-signing
Not started. Becomes a package with its own syllabus once it begins.
secrets-scanning
Not started. Becomes a package with its own syllabus once it begins.