Infographic: Supply Chain Security Report Card

The Report Card infographic provides organizations with “rules of thumb” when it comes to grading current efforts at securing the software supply chain. Based on the Supply-chain Levels for Secure Artifacts (SLSA) standard build levels, the Report Card points out where organizations may be failing to import open source resources securely, and/or ensure the integrity of the artifacts you build.