[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_28":-5,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58},"routes/_store+/_readers+/email_author.$slug/route",{"_9":10,"_11":-5},"book",{"_12":13,"_14":15,"_16":17,"_18":19,"_20":21,"_22":23},"currentUser","id","Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6Qm9va1Byb2R1Y3QvODIxODA","title","Secure Software Supply Chains","state","published","contactAuthorMethod","email","aboutText","

Every line of code you ship depends on hundreds of external components, automated build pipelines, and deployment systems that you do not fully control. The software supply chain is the longest attack surface in your infrastructure and the one most teams leave unprotected. This book shows you how to secure it from source code through dependencies, builds, artifacts, and runtime deployment using cryptographic verification, policy enforcement, and automation that works in production. You will learn the threat models behind real-world incidents like SolarWinds and Log4Shell, implement reproducible builds with Bazel and Nix, generate SBOMs and provenance attestations, sign artifacts with Sigstore, enforce policies in Kubernetes clusters, and wire everything together into a complete secure delivery pipeline that scales across teams. By the end you will understand not just which tools to use but why they work together, where they fail, and how to design a supply chain security program that survives audits, incidents, and organizational change.

","authors",[24],{"_12":25,"_26":27,"_28":29},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6UHJvZHVjdEF1dGhvci84NzgxNQ","name","Steve Publications","user",{"_30":31},"avatar",{"_32":33,"_34":35,"_36":37},"url","https://d39qdlcrvnra4b.cloudfront.net/avatars/3084982/medium/avatar.jpg?1784309602","styleName","medium","exists",true,"shoppingCartId","shoppingCart",{"_12":71,"_72":73,"_74":37,"_75":76,"_77":78,"_79":80,"_81":37},"locale","en","readerTheme","light","constants",{"_69":70},"publishers",{"_65":66,"_67":68},"learnerOrganizations",[],"needsLocaleCookieSync",false,"announcements",{"_59":60,"_61":-5},"sentryEnvironment","production","sentryRelease","0330f027e61fea8fdfbea39d6e12230efce095a5","announcement_store",{"_62":52,"_63":64},"announcement_authors","flag","text","

Kick off your book project, get started with GhostAI, get better at marketing, or spend the day doing all three! Free live workshops on Zoom. Saturday, June 27, 2026.

\n","companies",[],"universities",[],"paypalClientId","AX53Cwz8jR6rVVzzZiZNWWXl0dGagi-GZrjG-S3Ua14E5nrKMn7DxDQ730O4R8LusLPp49ALn6aRVaEy","no-cart","count",0,"free","updatedAt","","paymentGateway","STRIPE","cartItems",[],"loading"]

Email the Author