A Field Guide to Threat Vectors in the Software Supply Chain

Is your organization equipped to identify and remediate each type of threat?


Software isn’t developed in a vacuum. An entire ecosystem of components — the software supply chain — is involved in building, testing, and delivering a piece of software. Explore each step in the supply chain and discover how organizations can protect themselves from compromised source control, risky open source dependencies, compromised build pipelines, and insecure web applications.

In this eBook you’ll learn…

  • How to spot the biggest threats to the software supply chain
  • What we can learn from real-world incidents like Log4Shell
  • Tactics you can adopt to reduce your organization’s risk

© 2024 GitLab, Inc.

Complete this form to download the eBook

A Field Guide to Threat Vectors in the Software Supply Chain