Integration of Secure Software Supply Chain Frameworks in DevSecOps Pipelines for Ensuring Artifact Authenticity and Preventing Dependency Attacks through SBOM Validation
Keywords:
Software Bill of Materials (SBOM), DevSecOps, Supply Chain Security, Artifact Authenticity, Dependency Attacks, CI/CD Pipelines, SLSA Framework, Vulnerability ValidationAbstract
The proliferation of software supply chain attacks has underscored the vulnerabilityof modern development pipelines, with incidents such as the 2020 SolarWindsbreach highlighting the need for robust authenticity measures. This study investigates the integration of secure software supply chain frameworks
References
[1] Varun Kumar Tambi, Nishan Singh (2023). Developments and Uses of Generative Artificial Intelligence and Present Experimental Data on the Impact on Productivity Applying Artificial Intelligence that is Generative. International Journal of Advanced Research in Electrical, Electronics and Instrumentation Engineering (IJAREEIE), 12(10).


