SOFTWARE SUPPLY CHAIN SECURITY: A Practical Guide to SBOMs, SLSA Provenance, and EU Cyber Resilience Act Compliance For DevSecOps, Platform Engineering, and Application Security Teams
Language: English
Published by Independently published, 2026
- Softcover
- New
Seller: California Books, Miami, FL, U.S.A.California Books
AbeBooks seller since October 27, 2023
Condition: New
£ 25.98
Quantity: Over 20 available
Add to basketItem description from seller
Print on Demand.
Seller Inventory # I-9798164187187
- Title
- SOFTWARE SUPPLY CHAIN SECURITY: A Practical Guide to SBOMs, SLSA Provenance, and EU Cyber Resilience Act Compliance For DevSecOps, Platform Engineering, and Application Security Teams
- Author
- Wei Chen, Ethan
- Publisher
- Independently published
- Publication year
- 2026
- Condition
- New
- Binding
- Soft cover
- Language
- English
- ISBN 13
- 9798164187187
If you build, ship, or secure software for a living, you already know the old question, "is my code secure?", isn't the one regulators, customers, or attackers are asking anymore. The real question is: can you prove what's in your software, where it came from, and that nothing tampered with it along the way?
Most teams can't answer that. This book makes sure you can.
Software Supply Chain Security is the no-fluff, hands-on guide to SBOMs, SLSA provenance, and the compliance deadlines bearing down on every engineering org shipping software into the EU or to the U.S. federal government, written for people who have to actually build this, not just talk about it in a steering committee.
Inside, you'll build:
- Real, automated SBOM pipelines, not theory, using Syft, Trivy, and native ecosystem tools wired into actual GitHub Actions workflows
- SLSA provenance and build attestation, so you can cryptographically prove an artifact came from your pipeline and nothing else
- A CRA-ready compliance scope matrix that turns "are we compliant?" into a prioritized, dated roadmap your leadership can actually act on
- A vulnerability and license-gating workflow that catches problems before they ship, not after an auditor finds them
- A dated, phased rollout plan (Appendix F) mapping every technical build-out to the real CRA deadlines, 2026 and 2027
The numbers are no longer abstract. Third-party involvement in breaches nearly doubled in a single year. The EU Cyber Resilience Act now carries mandatory 24-hour incident reporting. U.S. federal procurement already requires SBOMs for every vendor. The organizations that figure this out now will spend the next three years selling into regulated markets without friction. The ones that don't will spend it explaining to auditors, customers, and boards why they can't.
This isn't a compliance book dressed up with engineering buzzwords, and it isn't a developer book that waves at regulation in one chapter and moves on. It's both, built by someone who's done the work, every pipeline, every policy, every template in this book is something you can put into production this week, not someday.
Who this is for:
DevSecOps engineers, platform and infrastructure teams, application security leads, compliance and GRC professionals, and engineering managers who need their organization audit-ready before the deadlines hit, not after.
Stop guessing whether you're compliant. Start proving it.
Scroll up and get your copy today.
"Synopsis" may belong to another edition of this title.
California Books
Miami, FL, U.S.A.
AbeBooks seller since October 27, 2023
Shipping rates within U.S.A.
| Item | 3 to 7 business days | 2 to 5 business days |
|---|---|---|
| First item | £ 2.23 | £ 12.61 |
Payment methods
Store description
We have 20 years experience selling books worldwide! Friendly customer support. Your satisfaction guaranteed!
Specialty
All authorized categoriesSeller's business information
Miramar International Services LLC
FL, U.S.A.
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to California Books, Fort Wayne, Indiana, U.S.A., without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.