Aqua Security and CIS release first formal guidelines for software supply chain security

(Source: VentureBeat) The new guidelines can break down the software supply chain into five key areas: source code, build pipelines, dependencies, artifacts and deployment.