Education on

What is software supply chain security

Thu, 04 Aug 2022 15:21:01 +0200

An earlier version of this material was published in the first chapter of the Linux Foundation Sigstore course.

Software producers have a supply chain just like manufacturing businesses have a supply chain. And just like manufacturers require physical inputs and then perform a manufacturing process to build a finished product, so do software producers, whether the producer is a company or individual. In other words, a software producer uses components, developed by third parties and themselves, and technologies to write, build, and distribute software. A compromise introduced anywhere in this chain is an example of a software supply chain security issue. Tools and practices like those implemented in Chainguard’s containers help organizations protect against these risks through built-in SBOMs, provenance attestations, and SLSA compliance.

Learning Labs

Wed, 18 Jun 2025 21:00:00 +0000

Learning Labs are regularly run, virtual events from Chainguard that provide educational and training material about Chainguard products, software supply chain security, and related topics.

Lab notes

The lab notes often include demo projects, a slide presentation, sample commands, links to specific sections in the video, and pointers to more resources:

CVEs

Fri, 30 Jun 2023 19:07:55 +0000

CVEs, or Common Vulnerabilities and Exposures, are entries of publicly disclosed software vulnerabilities which, if not addressed, may be used by attackers to access, manipulate, or compromise a computer system.