We use https://www.kusari.dev/ https://www.kusari.dev/ which is about securing the building and deployment of software, not about blockchains. FRSCA: Factory f

We use https://www.kusari.dev/ https://www.kusari.dev/ which is about securing the building and deployment of software, not about blockchains. FRSCA: Factory for Repeatable Secure Creation of Artifacts provides a simple-to-install solution that aims to help secure the supply chain by building secure pipelines. It also provides abstractions and definitions with security guardrails ensuring all builds follow supply chain security best practices. GUAC: Graph for Understanding Artifact Composition leverages metadata to provide deeper visibility and enable users to quickly understand security issues throughout the software supply chain, their blast radius, and how to remediate their root causes. Learn more as we build this out in the open source with our blog article. https://www.kusari.dev/products/securesupplychain/ https://www.kusari.dev/products/securesupplychain/ See also: https://slsa.dev/ https://slsa.dev/