# Supply Chain Audit

> Auditing software supply chain security across CI/CD pipelines, container images, and language ec…

Auditing software supply chain security across CI/CD pipelines, container images, and
language ecosystems. Detects mutable dependency references, insecure CI patterns,
credential exposure risks, and missing SBOM/SLSA controls. Use when performing a
supply chain audit, checking action pinning, auditing dependencies, scanning for
CI security issues, reviewing container security, or assessing dependency security.
Covers GitHub Actions, containers, Python, Node, Go, Rust, .NET, and more.

- Page: https://ss33.ai/skills/rysweet/supply-chain-audit-4799068618
- Publisher: rysweet
- Category: [Security](https://ss33.ai/skills/category/security-w9g95g) › [Application security](https://ss33.ai/skills/category/security-w9g95g/application-security-6s8pr9)
- Source: https://github.com/rysweet/amplihack/blob/84424457d588fce4e492abfebfd03432ec647a56/.claude/skills/supply-chain-audit/SKILL.md

## Skill

This skill's licence does not allow redistribution, so the store does not serve its text. Get it from the author: https://github.com/rysweet/amplihack/blob/84424457d588fce4e492abfebfd03432ec647a56/.claude/skills/supply-chain-audit/SKILL.md