Which Software Supply Chain Security Controls Actually Catch Problems?
I'm putting together a software supply chain security plan for a mid-sized team, but most of the material I've found comes from vendor blogs. We already generate SBOMs…
provenance
How to Ensure Provenance for Kubernetes Manifests?
Hey everyone, our team primarily utilizes GitOps for our app and service deployments, mainly relying on Argo CD as our GitOps controller. We also incorporate KCL to manage…