domains / families / security / supply-chain-attack-response

supply-chain-attack-response

authentic

Detect, respond to, and prevent software supply chain attacks on package registries, container images, and CI/CD pipelines with lockfile auditing, provenance verification, and emergency response playbooks.

When to use

• Detecting compromised dependencies
• Responding to suspicious dependency behavior
• Conducting periodic supply chain security audits
• Investigating unexpected CI/CD pipeline behavior
• Verifying provenance of new third-party dependencies
• Responding to typosquatted packages or registry account takeovers
• Implementing SLSA compliance
• Generating build provenance

Skill page

Source