Results for “software-supply-chain”
15 skills
mukul975 analyzing-supply-chain-malware-artifacts
Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise.
24.6k · bundle
mukul975 hunting-for-supply-chain-compromise
Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts.
24.6k · bundle
More results
mukul975 generating-and-analyzing-sboms
Generate CycloneDX and SPDX SBOMs from container images and filesystems, scan them for vulnerabilities with Grype, and sign attestations with Cosign for supply-chain trust.
24.6k · bundle
mukul975 implementing-code-signing-for-artifacts
Sign build artifacts (binaries, packages, containers) with GPG, Sigstore, and platform-specific tools to ensure integrity and authenticity throughout the software supply chain.
24.6k · bundle
mukul975 verifying-build-provenance-with-slsa-sigstore
Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain.
24.6k · bundle
mesteriis supply-chain-review
Reviews lockfiles, installers, provenance, CI permissions, dependency confusion, artifacts, registries, and publishing.
0 · bundle
galyarderlabs open-source-license
Guides open source license selection, comparison, compliance review, and drafting of LICENSE/NOTICE files using canonical texts.
20 · bundle
joshuashepherd type-safety-chain
Implements or verifies the six-layer type safety chain from Drizzle schema through Zod, services, API routes, and React hooks, including regeneration after DB changes and bootstrapping in new folders.
1
bitwikiorg skills
Imported skill skills from langchain
3
georgeqle ord-scan
Scan for OSS tool opportunities from npm gaps, GitHub trends, and developer pain points
1 · bundle
bobmatnyc software-patterns
Compare tradeoffs and recommend architectural patterns — dependency injection, service-oriented architecture, repository, domain events, circuit breaker, and anti-corruption layer. Use when choosing between design patterns, planning microservices boundaries, evaluating system design alternatives, or asking 'which pattern should I use' for a specific coupling or resilience problem.
71 · bundle
neuralblitz build-tools
Automates multi-language software builds with Makefiles, dependency management, testing, packaging, and CI/CD integration.
1
tools-only 136-here-acfe5085
Introduces Prompt-Driven Development (PDD), a methodology that uses version-controlled natural-language prompts as the source of truth for generating code, tests, and documentation, with a practical adoption roadmap.
7 · bundle
nickgallick nick-fullstack
Turns product strategy into a production-grade MVP or shipped full-stack application using Next.js, Supabase, and Vercel with disciplined scope and quality standards.
0 · bundle
30eggis specialized-supply-chain-strategist
Expert supply chain management and procurement strategy specialist — skilled in supplier development, strategic sourcing, quality control, and supply chain digitalization. Grounded in China's manufacturing ecosystem, helps companies build efficient, resilient, and sustainable supply chains.
2