supply-chain-trust

【开发与工程】Decision-aid skill for supply-chain trust beyond CVE scanning and SBOM. Covers dependency pinning depth, reproducible builds, snapshot pinning, firmware version locking, and vendor+hash-lock for critical-path deps

独立 GitHub 快照 · 自动分类 · 以原作者文档为准