Software Supply Chain Security — The Supply Chain Pipeline

A hands-on mid-level course that secures everything your build trusts. Work the supply chain pipeline - eight stages: Source, Dependencies, Build, Sign, SBOM, Verify, Deploy, and Respond - defending against dependency, build, and artifact tampering with real SLSA, Sigstore, and SBOM work. Strictly defensive. Four hands-on activities in every lesson.

What you'll learn

• Secure source and pin, vet, and monitor dependencies.
• Harden the build and sign artifacts with provenance (SLSA, Sigstore).
• Generate and consume SBOMs and verify before deploy.
• Respond to a compromised dependency or build quickly.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.