FrameworkOpenSSF
SLSA: Supply-chain Levels for Software Artifacts
OpenSSF framework for improving integrity across build, provenance, and software artifact supply chains.
OpenSSFSLSAsoftware supply chainprovenance
Curated Collection
Secure Software Supply Chain
Standards and guidance for CI/CD, artifacts, dependencies, provenance, and secure development.
ToolOpenSSF
OpenSSF Scorecard
OpenSSF tool for assessing open source project security health through automated checks.
OpenSSFopen source securitydependenciessoftware supply chain
ToolOpenSSF
Sigstore Software Signing
Open source project for signing, verifying, and protecting software artifacts in supply chains.
SigstoreOpenSSFsoftware signingartifact integrity
FrameworkNIST
NIST Secure Software Development Framework
NIST guidance for reducing software vulnerabilities through secure development practices.
NISTSSDFsecure developmentDevSecOps
FrameworkOWASP
OWASP Software Assurance Maturity Model
OWASP maturity model for analyzing and improving software security programs.
OWASPSAMMsoftware assurancematurity model