51. Software supply chain security

Protect source, dependencies, build systems, images, registries, manifests, and deployment paths. Apply software bills of materials, signing, provenance, admission verification, vulnerability scanning, and trusted build practices.