sbom-supply-chain-security-expert
From the author
Expert guide for Software Supply Chain Security, CycloneDX/SPDX SBOM generation, Sigstore Cosign keyless signing, SLSA Level 3 provenance attestation, and dependency lockfile hardening / Panduan ahli keamanan rantai pasok perangkat lunak, SBOM CycloneDX, Sigstore Cosign, dan SLSA Level 3.
Install
npx skills add roedyrustam/vibes-plug --skill sbom-supply-chain-security-expert -a claude-code
Installs to .claude/skills/sbom-supply-chain-security-expert/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
No warnings.
Why 83
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- 20-supply-chain-securityMasriyan/Claude-Code-CyberSecurity-SkillSoftware supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicious package indicators, CI/CD pipeline hardening, and artifact provenance/signing (SLSA, Sigstore)Security★ 504
- manage-supply-chainharness/harness-skillsManage Harness Software Supply Chain Assurance (SSCA) via MCP. Configure automated SBOM generation with CycloneDX or SPDX formats, set up artifact signing and attestation with Cosign, define supply chain security policies using OPA, and track SLSA provenance levels. Use when asked to generate SBOMs, sign artifacts, enforce supply chain policies, track software provenance, or manage SLSA compliance. Do NOT use for OPA pipeline governance policies (use create-policy instead) or vulnerability scanning (use security-report instead). Trigger phrases: SBOM, software bill of materials, supply chain security, SLSA, artifact signing, cosign, provenance, attestation, CycloneDX, SPDX, supply chain policy.Security★ 125
- supply-chain-securitycoco-research/cocoUse for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.Security★ 784
- securing-cloud-and-supply-chaintelagod/code-abyss云原生与软件供应链安全防御。容器/K8s 加固、Service Mesh、CI/CD 安全、SLSA/SBOM/Sigstore、云 IAM、Secrets 管理、IaC 安全。Use when hardening Kubernetes clusters, auditing CI/CD pipelines, implementing supply chain security, managing cloud IAM, or reviewing IaC code.Security★ 242
- model-supply-chain-securityBagelHole/DevOps-Security-Agent-SkillsSecure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and trusted model promotion.Security★ 1.2K
- security-devsecopsMindrally/skillsDevSecOps, secure software development lifecycle (SSDLC), and application security (AppSec) practices covering secret handling, input validation, dependency hygiene, authentication/authorization, and CI/CD security tooling (SAST, SCA, DAST, secret scanning, IaC scanning). Use when writing code that handles credentials, user input, database queries, or authentication, when setting up a CI/CD pipeline, or when reviewing code or infrastructure for security issues.Security★ 286
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in