One lesson
An individual lesson
This track has no lesson ready to buy yet. Each lesson becomes available only after it is built and reviewed.
$5.00Not available yet
All course tracks
Testing and security · 30 lessons · up to 10 minutes each
Software Supply-Chain Security
A planned supply-chain path through inventories, attestations, signing, and response.
Coming Soon
One-time purchase · USD
Choose what to unlock
Access is attached to your account after payment is verified. No subscription.
Full category
Software Supply-Chain Security
Permanent access to the lessons published in this track when you buy. Future lessons are not included. 0 of 30 lessons are published; 0 are in owner review and 30 are Coming Soon.
$29.0030 lessons still in progress
Beginner
Lessons 1–10
01 Software Supply-Chain Security: Sketch dependency inventory and SBOM
Topic: dependency inventory and SBOM
Draw a small map of dependency inventory and SBOM in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner4 minComing Soon02 Software Supply-Chain Security: Name the parts of version pinning and lockfiles
Topic: version pinning and lockfiles
Label the main pieces in version pinning and lockfiles in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner5 minComing Soon03 Software Supply-Chain Security: Trace an example of maintainer and origin review
Topic: maintainer and origin review
Follow one input through maintainer and origin review in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner6 minComing Soon04 Software Supply-Chain Security: Compare choices for provenance attestations
Topic: provenance attestations
Write down one practical difference between provenance attestations in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner7 minComing Soon05 Software Supply-Chain Security: Find the boundary in build isolation
Topic: build isolation
Mark where build isolation in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner8 minComing Soon06 Software Supply-Chain Security: Inspect an example of secret-safe CI permissions
Topic: secret-safe CI permissions
Annotate a minimal example of secret-safe CI permissions in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner9 minComing Soon07 Software Supply-Chain Security: Connect vulnerability triage to a neighboring concept
Topic: vulnerability triage
Show how vulnerability triage in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner10 minComing Soon08 Software Supply-Chain Security: Spot a failure mode in artifact signing and verification
Topic: artifact signing and verification
Describe one likely failure for artifact signing and verification in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner3 minComing Soon09 Software Supply-Chain Security: Read an official example of update rollout and rollback
Topic: update rollout and rollback
Summarize an official example of update rollout and rollback in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner5 minComing Soon10 Software Supply-Chain Security: Choose a use case for release evidence capture
Topic: release evidence capture
Match one small use case to release evidence capture in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Beginner6 minComing Soon
Intermediate
Lessons 11–20
11 Software Supply-Chain Security: Build an example with dependency inventory and SBOM
Topic: dependency inventory and SBOM
Create a small working example that uses dependency inventory and SBOM in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate4 minComing Soon12 Software Supply-Chain Security: Compose version pinning and lockfiles with another component
Topic: version pinning and lockfiles
Combine version pinning and lockfiles in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon13 Software Supply-Chain Security: Configure maintainer and origin review for a small case
Topic: maintainer and origin review
Set up maintainer and origin review in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon14 Software Supply-Chain Security: Validate inputs around provenance attestations
Topic: provenance attestations
Add a check around provenance attestations in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate7 minComing Soon15 Software Supply-Chain Security: Use build isolation in a short workflow
Topic: build isolation
Add build isolation in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate8 minComing Soon16 Software Supply-Chain Security: Refactor secret-safe CI permissions into a reusable unit
Topic: secret-safe CI permissions
Extract secret-safe CI permissions in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate9 minComing Soon17 Software Supply-Chain Security: Exercise vulnerability triage with sample data
Topic: vulnerability triage
Run sample data through vulnerability triage in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate10 minComing Soon18 Software Supply-Chain Security: Observe artifact signing and verification outputs
Topic: artifact signing and verification
Capture the result of artifact signing and verification in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate3 minComing Soon19 Software Supply-Chain Security: Recover from a update rollout and rollback failure
Topic: update rollout and rollback
Handle one expected failure from update rollout and rollback in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon20 Software Supply-Chain Security: Document release evidence capture behavior
Topic: release evidence capture
Write a short usage note for release evidence capture in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon
Advanced
Lessons 21–30
21 Software Supply-Chain Security: Test a boundary around dependency inventory and SBOM
Topic: dependency inventory and SBOM
Add an edge-case test for dependency inventory and SBOM in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced4 minComing Soon22 Software Supply-Chain Security: Harden version pinning and lockfiles
Topic: version pinning and lockfiles
Add the relevant access, safety, or validation control to version pinning and lockfiles in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced5 minComing Soon23 Software Supply-Chain Security: Measure maintainer and origin review
Topic: maintainer and origin review
Record a small baseline for maintainer and origin review in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced6 minComing Soon24 Software Supply-Chain Security: Reduce cost in provenance attestations
Topic: provenance attestations
Change one measurable cost in provenance attestations in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced7 minComing Soon25 Software Supply-Chain Security: Diagnose a build isolation failure
Topic: build isolation
Use an observable signal to explain a failure in build isolation in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced8 minComing Soon26 Software Supply-Chain Security: Make secret-safe CI permissions repeatable
Topic: secret-safe CI permissions
Show that rerunning secret-safe CI permissions in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced9 minComing Soon27 Software Supply-Chain Security: Review trade-offs in vulnerability triage
Topic: vulnerability triage
Compare two documented approaches to vulnerability triage in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced10 minComing Soon28 Software Supply-Chain Security: Improve artifact signing and verification maintainability
Topic: artifact signing and verification
Refine artifact signing and verification in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced3 minComing Soon29 Software Supply-Chain Security: Verify update rollout and rollback end to end
Topic: update rollout and rollback
Check that a complete small flow using update rollout and rollback in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced5 minComing Soon30 Software Supply-Chain Security: Audit release evidence capture against its source docs
Topic: release evidence capture
Check the implementation of release evidence capture in the context of dependency provenance, build integrity, and artifact verification; save a short example or check that demonstrates the result.
Advanced6 minComing Soon
Reference documentation
References support the selected track topics while its lesson content is built and reviewed progressively.
This track is a catalog outline only. Each lesson remains unavailable until it is built and personally reviewed.