IT AI Skill

Supply Chain Security Sbom

Manage software supply chain security including Software Bill of Materials (SBOM) generation, dependency vulnerability management, third-party risk assessment, secure software development practices, and supply chain attack prevention. Use when generating and managing SBOMs, auditing third-party dependencies, implementing supply chain security controls, responding to dependency vulnerabilities (like Log4Shell), assessing vendor security posture, or implementing SLSF (Secure Software Development Framework) requirements. Triggers on phrases like "supply chain security", "SBOM", "software bill of materials", "dependency vulnerability", "third-party risk", "software supply chain", "secure SDLC", "OSS security", "dependency audit", "vulnerable dependency", "SLSA", "software artifacts", "code signing".