Software supply chain security expertise covering SBOM generation and analysis, dependency vulnerability scanning, Sigstore signing and verification, SLSA framework compliance, artifact provenance, build integrity, package manager security, container image signing, and CI/CD pipeline hardening for establishing trust in the software delivery process.
Free and open source. macOS, Windows and Ubuntu.
Add the skill to a bot, then ask your Chief of Staff:
“Use the Supply Chain Security skill on this: [describe the job, or paste your notes].”
Free for Mac, Windows and Ubuntu.
Open Settings → Skills and switch on Supply Chain Security for any bot. Or ask your Chief of Staff to pick skills for a job.
The bot reads the skill when the job calls for it, and works the way it lays out.
Software supply chain security expertise covering SBOM generation and analysis, dependency vulnerability scanning, Sigstore signing and verification, SLSA framework compliance, artifact provenance, build integrity, package manager security, container image signing, and CI/CD pipeline hardening for establishing trust in the software delivery process.
Nothing. It ships with Murage, which is free and open source. Your bots run on the AI plan you already have.
Yes. Open it in Settings → Skills to read, edit or duplicate it. Skill Guard scans it again after every edit.
Download the free app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.
No account needed · Runs on the AI plan you already pay for