Running Helix Health Software's org-wide supply chain program through the provenance funnel: first-party, open-source, commercial and AI-generated code pass through scope, inventory, standards, build integrity, dependencies, verification, vendors and assurance before they are trusted. Each stage turns an assumption into proof — one pilot SBOM into a central store for every product, a vague SLSA claim into a stated level per tier, non-reproducible builds into hermetic signed provenance, internet installs into a pinned proxy registry, zero of 100 deployments checked into a deploy gate, and 2 of 10 vendors sending SBOMs into a contract requirement. When a library maintainer is hijacked, one query across the central SBOMs replaces an hour of emailing 59 teams.

CY-SENIOR-043Senior Level · Software Supply Chain Program

Software Supply Chain Security Program — The Provenance Funnel

A senior-level, program-scale course that runs software supply chain security as an org-wide program, not a single pipeline. Work the provenance funnel - eight stages: Scope, Inventory, Standards, Build Integrity, Dependencies, Verification, Vendors, and Assurance - proving provenance rather than assuming it across first-party, open-source, commercial, build-infrastructure, and AI-generated code, with real SBOM/VEX, SLSA, signing, admission, dependency-governance, and customer-assurance work. Four hands-on activities in every lesson.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Scope and charter an org-wide supply-chain program across every software category, grounded in a real threat model.
Build an org-wide component and build-system inventory with current SBOMs and VEX, and adopt SLSA/SSDF/Scorecard standards with a tiered minimum bar.
Harden build integrity with hermetic builds, isolated ephemeral runners, signed provenance, and admission control, and govern dependencies against malicious packages.
Enforce deploy-time verification, hold vendors to SBOM/VEX/patch-SLA requirements, and deliver honest SBOMs and maturity metrics to customers and regulators.

Price:৳10,000