📄️ 3.2.1 Supply Chain Risks
❗ What are Supply Chain Risks ?
📄️ 3.2.2 Introduction to Dependency-Checker
Youtube 📺
📄️ 3.2.3 Introduction to vet
vet is a tool for identifying risks in open
3.2 - Software Composition Analysis
Software Composition Analysis identifies vulnerabilities in third-party libraries, addressing supply chain risks in software. Dependency-Checker helps automate this process, and integrating it into GitHub Actions (GHA) enables continuous monitoring of dependencies in the development workflow.