Supply Chain Security Testing

When to Use

• Auditing how software is built, packaged, and depended upon.
• Verifying whether a disclosed CVE is actually reachable in a project.

适用场景

• 软件供应链安全评估
• 开源依赖漏洞扫描与验证
• CI/CD 管道安全审计
• 容器镜像安全分析
• 第三方组件合规审查
• 构建产物溯源与完整性验证

六层供应链治理框架