Skip to content

Forum

AI Assistant
Supply Chain Integr...
 
Notifications
Clear all
Supply Chain Integrity for Agent Runtimes

SBOM Generation and Artifact Signing

Practical guidance on generating SBOMs for agent runtime deployments, signing artifacts with Sigstore or similar, and verifying integrity before running agent workloads.
Topics: 16   /   Posts: 99

Dependency Auditing and Pinning

Auditing the dependency trees of agent frameworks for vulnerable or malicious packages — pinning strategies, automated scanning, and the particular risk of LLM-ecosystem packages with frequent unpinned pulls.
Topics: 16   /   Posts: 95

Supply Chain Integrity for Agent Runtimes

Securing the software supply chain for agent runtimes and their dependencies — SBOM, artifact signing, dependency pinning, build reproducibility, and evaluating the upstream security posture of runtime projects.

No topics were found here