Software supply chain security protects the code, dependencies, build systems and pipelines that produce software. Its goal is that attackers cannot tamper with what ships to production.
CI/CD is the practice of building and testing every code change automatically, then releasing changes that pass through a repeatable pipeline. It shortens the gap between writing code and running it in production.
DevSecOps is the practice of building security checks into everyday software delivery. Code, dependencies and infrastructure are tested automatically on every change instead of being reviewed only before release.
Open source describes software whose source code is published under a licence that lets anyone use, study, modify and share it. Projects are often developed in public by communities of individuals and companies.
A software bill of materials (SBOM) is a machine-readable inventory of every component and version that makes up a piece of software. It includes indirect, transitive dependencies.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.