Glossary
Software Supply Chain Security
Assurance that the software you run is exactly what its authors built - via signed artifacts, a bill of materials (SBOM), and verifiable build provenance.
Software supply chain security protects the path from source code to running artifact. Its core practices are signing images (for example with Sigstore/cosign), publishing a software bill of materials (SBOM) that lists every component, and attaching build provenance (such as SLSA) that proves how and where the artifact was built.
Consumers pin an image by its cryptographic digest and use admission control to verify signatures, so no silent update or substituted layer can slip in. For governance software that sits in the request path, this guarantees only the exact, reviewed build ever runs.
Govern AI like infrastructure.
Talk to our team about deploying DataStrict across your enterprise stack.