# Supply Chain Security

> Master software supply chain security. Learn to generate SBOMs, implement artifact signing, and defend against dependency confusion and typosquatting.

Canonical: https://codelivly.com/rooms/supply-chain-security
Last updated: 2026-09-25

| | |
|---|---|
| Level | Advanced |
| Category | Cloud Security |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

This advanced module dives deep into the critical domain of software supply chain security. You will learn to identify and mitigate risks across the entire software lifecycle, from third-party dependencies to final deployment. The curriculum covers defending against dependency confusion and typosquatting, implementing cryptographic artifact signing (e.g., Sigstore/Cosign), utilizing Software Bill of Materials (SBOMs), and securing package registries. By mastering these concepts, you will build resilient, verifiable software pipelines that protect against sophisticated, automated supply chain attacks.

## Lessons

1. What Is Software Supply Chain Security and Why Does It Matter (30 min)
2. Dependency and Artifact Integrity (30 min)
3. Guided Lab: Verifying Build Artifact Integrity (30 min)

## Related

- [Learning path: Infrastructure as Code and DevSecOps](https://codelivly.com/learning-paths/infrastructure-as-code-and-devsecops)
- [All rooms](https://codelivly.com/rooms)