Security
Software Supply-Chain Security
Software supply-chain security protects the sources, dependencies, build systems, and distribution paths used to produce software. It combines controls such as dependency review, isolated builds, artifact verification, and provenance to reduce tampering risks.
Also known as: supply-chain security
Why it matters
A trusted source tree is insufficient if dependencies, builders, or distribution paths can be tampered with.
Practical example
Pin third-party actions to reviewed commit identifiers and verify release artifacts before distribution.
Related terms
Sources
Definition reviewed .
Start with $10 in free credits
Change the runner label in your workflow and keep the rest of your GitHub Actions setup. Runner time is billed per minute.