How to enhance supply chain security with GitLab and TestifySec

GitLab has announced a collaboration with TestifySec to integrate the Witness open-source tool into its platform, advancing its Secure Software Supply Chain Direction. This integration addresses the increasing concern of securing software supply chains by documenting the entire process from code creation to deployment, with a focus on creating a Software Bill of Materials (SBOM) and utilizing frameworks like SLSA. Witness enhances security by verifying and recording data from CI systems in a standardized way, shifting security practices left and improving transparency around software components. This approach is in response to recent software supply chain attacks and offers a new method for securing CI systems and their artifacts, making use of verifiable cloud infrastructure data from providers like AWS. GitLab and TestifySec plan to continue developing features around this integration to further enhance security measures.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.