Sign-In
Cart
Software Build Integrity and Dependency Trust: Protect Source Code, Packages, Build Pipelines, Artifacts, and Release Provenance
Paperback
General ComputersComputer Security
Publisher: Independently Published
Published: Sep 3 2026
Pages: 180
Weight: 0.50
Height: 0.45 Width: 6.00 Depth: 9.00
Language: English
You reviewed the code. You scanned the dependencies. You signed the release. But can you prove that the software running in production is the exact software your organization intended to ship?
Modern applications are created through far more than source code. Repositories, package registries, open-source projects, CI runners, reusable workflows, build images, compilers, caches, cloud identities, signing systems, artifact stores, containers, and deployment controllers all influence what eventually reaches production.
Every one of those systems creates a trust decision.
Software Build Integrity and Dependency Trust is a practical guide to designing software delivery systems in which those decisions can be verified rather than merely assumed.
Instead of treating software supply-chain security as a collection of scanners and compliance checkboxes, this book shows how to build a measurable chain of evidence from authorized change to production deployment.
Inside, you'll learn how to:
- Protect repositories, branches, tags, maintainers, workflow files, and release paths
- Control third-party components before they enter sensitive environments
- Defend against namespace confusion, malicious updates, compromised maintainers, and unsafe transitive relationships
- Treat CI/CD platforms as privileged security infrastructure
- Separate untrusted validation, trusted compilation, publication, signing, promotion, and deployment
- Build reproducible, hermetic, isolated, and evidence-producing environments
- Use immutable digests to identify exactly what was tested, approved, distributed, and deployed
- Design signing systems around identities and policy rather than shared long-lived secrets
- Generate and use SBOMs, VEX information, attestations, and machine-readable evidence
- Apply SLSA concepts without turning maturity levels into meaningless badges
- Enforce promotion and deployment decisions through policy as code
- Replace permanent automation credentials with short-lived workload identities
- Prepare for compromised runners, malicious components, stolen signers, poisoned caches, and altered release workflows
- Build forensic evidence that allows responders to quickly determine where affected components were built and deployed
- Scale strong controls across hundreds or thousands of repositories without creating release bureaucracy
Real-world incidents involving SolarWinds, Codecov, PyTorch, and xz Utils demonstrate how different parts of the delivery chain can fail-and why no single security control is enough.
The book also includes a practical maturity model, a structured learning path, a 90-day implementation playbook, a seven-layer reference architecture, a ten-question architecture review, a decision matrix, and detailed operational checklists that teams can adapt to real environments.
Whether you're a software engineer, DevOps or DevSecOps professional, platform engineer, cloud engineer, security engineer, architect, SRE, engineering leader, or technology risk professional, this book will help you answer the question that increasingly matters:
Why should this exact software be trusted to run?
Build faster when appropriate. Verify before trust. Make evidence part of the delivery system.
Also from
Frost, Rion
Radio Links for Drones: Selecting Antennas and Protocols for Long-Range Control
Frost, Rion
Paperback
Drone Mapping Fundamentals: A Guide to Photogrammetry and Surveying for Professionals
Frost, Rion
Paperback
FPV Electronics Explained: A Guide to Soldering and Wiring Flight Stacks Correctly
Frost, Rion
Paperback
Building Ground Control Stations: Designing User Interfaces for Monitoring and Controlling UAVs
Frost, Rion
Paperback
Troubleshooting FPV Drones: A Systematic Approach to Diagnosing Vibration and Electrical Issues
Frost, Rion
Paperback
Microcontroller Home Projects: Build sensors, relays, alerts, and simple automation devices for everyday use
Frost, Rion
Paperback
Betaflight Configuration Guide: Tuning PID Controllers and Filters for Locked-In Flight
Frost, Rion
Paperback
Intelligent Flight Control: Using Python to Build Adaptive and Reactive Drone Behaviors
Frost, Rion
Paperback
Drone Firmware Explained: A Deep Dive into Control Loops and Sensor Fusion Algorithms
Frost, Rion
Paperback
ROS for Multi Robot Systems: Coordinating Drone Swarms with Distributed Communication
Frost, Rion
Paperback
MAVLink for System Integrators: Connecting Heterogeneous Robotic Systems over Serial and UDP
Frost, Rion
Paperback
Developing Custom Flight Modes: Extending the PX4 Stack to Support Unique Aerial Behaviors
Frost, Rion
Paperback
Coding Aerial Robots: A Practical Guide to Python Scripting for Unmanned Systems
Frost, Rion
Paperback
Visual Odometry with ROS: Using Cameras for Precise Positioning in GPS-Denied Environments
Frost, Rion
Paperback
Telemetry Data Streams: Parsing and Visualizing Flight Metrics in Real-Time Applications
Frost, Rion
Paperback
Real-Time Systems for UAVs: Managing Processing Power and Latency in Flight Computers
Frost, Rion
Paperback
Mastering PX4 Development: Customizing Flight Control Firmware for Specialized Missions
Frost, Rion
Paperback
Python for Embedded Robotics: Interfacing Sensors and Actuators on Companion Computers
Frost, Rion
Paperback
Building Robots with ROS 2: A Step-by-Step Guide to Nodes, Topics, and Services
Frost, Rion
Paperback
MySQL Blueprint for Beginners: Build, Query, and Manage Databases for Websites and Small Apps
Frost, Rion
Paperback
Precision Agriculture with Drones: Using Multispectral Imaging to Monitor Crop Health
Frost, Rion
Paperback
Git Confidence Workshop for Beginners: Track Code, Fix Mistakes, and Publish Projects
Frost, Rion
Paperback
The Drone Programmer's Handbook: Essential Skills for Writing Robust and Safe Flight Code
Frost, Rion
Paperback
Networked Aerial Systems: Implementing 4G and 5G Connectivity for Beyond Visual Line of Sight
Frost, Rion
Paperback
.NET Desktop App Troubleshooting Manual: Fix Build Errors, UI Problems, Crashes, and Deployment Failures
Frost, Rion
Paperback
The MAVLink Protocol Reference: Defining Custom Message Sets for Specialized Payloads
Frost, Rion
Paperback
Digital Video Systems for FPV: Configuring HD Links for Low Latency Visual Feedback
Frost, Rion
Paperback
Private Home Server Projects: Host files, media, automation, backups, and monitoring from one small machine
Frost, Rion
Paperback
Smart Lighting Projects: Build responsive scenes, schedules, and ambient effects for a more useful home.
Frost, Rion
Paperback
Long-Range FPV Flight: Optimizing Power Systems and Video Transmitters for Distance
Frost, Rion
Paperback
Designing Quadcopter Frames: Understanding Geometry and Materials for Custom Builds
Frost, Rion
Paperback
Advanced ROS Simulation: Modeling Physics and Aerodynamics for Realistic Drone Testing
Frost, Rion
Paperback
Building FPV Racing Drones: Selecting Components for Speed, Agility, and Durability
Frost, Rion
Paperback
Python and Flight Data: Analyzing Logs and Telemetry for Performance Optimization
Frost, Rion
Paperback
Thermal Imaging from the Air: Applying Infrared Sensors for Search and Rescue Missions
Frost, Rion
Paperback
SQL for Business Analysts Playbook: Turn Raw Data into Reports, Metrics, and Actionable Insights
Frost, Rion
Paperback
Ruby on Rails for Beginners: Build Database-Driven Web Apps with Clean, Practical Projects
Frost, Rion
Paperback
ESPHome Blueprint for Beginners: Build Your Own Smart Sensors, Switches, and Home Automation Devices
Frost, Rion
Paperback
Diagnosing Network Performance: Find Latency, Packet Loss, Jitter, Congestion, and Throughput Bottlenecks
Frost, Rion
Paperback
DNS and DHCP Operations: Design, Diagnose, and Maintain Reliable Naming and Address Assignment
Frost, Rion
Paperback
Also in
Computer Security
Dawn of the Code War: America's Battle Against Russia, China, and the Rising Global Cyber Threat
Graff, Garrett M.
Carlin, John P.
Paperback
CompTIA Network+ Certification All-in-One Exam Guide, Ninth Edition (Exam N10-009)
Weissman, Jonathan S.
Paperback
5 Habits of the Tech-Ready Family: Raising Wise Kids in a Wild Digital World
McKenna, Chris
Paperback
Spies, Lies, and Cybercrime: Cybersecurity Tactics to Outsmart Hackers and Disarm Scammers
O'Neill, Eric
Hardcover
Comptia A+ Complete Study Guide, 2-Volume Set: Volume 1 Core 1 Exam 220-1201 and Volume 2 Core 2 Exam 220-1202
Buhagiar, Jon
Docter, Quentin
Paperback
Isc2 Cissp Official Study Guide & Practice Tests Bundle
Stewart, James Michael
Gibson, Darril
Chapple, Mike
Paperback
Blown to Bits: Your Life, Liberty, and Happiness After the Digital Explosion
Abelson, Hal
Ledeen, Ken
Lewis, Harry
Paperback
Linux Basics for Hackers, 2nd Edition: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
Comptia Security+ Study Guide with Over 500 Practice Test Questions: Exam Sy0-701
Chapple, Mike
Seidl, David
Paperback
Hacking & Tor: The Complete Beginners Guide To Hacking, Tor, & Accessing The Deep Web & Dark Web
Jones, Jack
Paperback
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide
Chapple, Mike
Stewart, James Michael
Gibson, Darril
Paperback
Don't Trust Your Gut: Using Data to Get What You Really Want in Life
Stephens-Davidowitz, Seth
Paperback
Password Logbook (Hip Floral): Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location
Editors of Rock Point
Hardcover
From Heatmaps to Histograms: A Practical Guide to Cyber Risk Quantification
Martin-Vegue, Tony
Paperback
Cisa Certified Information Systems Auditor Study Guide and Practice Tests Bundle: Covers 2024 Exam Objectives
Chapple, Mike
Gregory, Peter H.
Paperback
Home Assistant for Beginners: Build a private smart home without relying on the cloud
Haagenrud, Thom
Paperback
Comptia A+ Complete Review Guide: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Paperback
Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
Greenberg, Andy
Paperback
Serious Cryptography, 2nd Edition: A Practical Introduction to Modern Encryption
Aumasson, Jean-Philippe
Paperback
Comptia A+ Complete Certification Kit: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Docter, Quentin
Buhagiar, Jon
Paperback
Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World
Menn, Joseph
Paperback
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Paperback
Cyber War: The Next Threat to National Security and What to Do about It
Clarke, Richard A.
Knake, Robert
Paperback
Computer Hacking: The Crash Course Guide to Learning Computer Hacking Fast & How to Hack for Beginners
Warren, Tim
Paperback
AWS Certified Security Study Guide: Specialty (Scs-C02) Exam
Mu¿oz, Mauricio
Moraes, Alexandre M. S. P.
Goldfarb, Dario Lucas
Paperback
Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation, Second Edition
Reiber, Lee
Paperback
The Art of Deception: Controlling the Human Element of Security
Mitnick, Kevin D.
Simon, William L.
Paperback
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
Zetter, Kim
Paperback
Container Security: Fundamental Technology Concepts That Protect Cloud Native Applications
Rice, Liz
Paperback
Humorous Cryptograms: 300 Large Print Puzzles To Keep You Entertained (Large Print Edition)
Nest, Game
Paperback
The Future of Hacking: The Rise of Cybercrime and the Fight to Keep Us Safe
Scherling, Laura S.
Hardcover
Learning Cybersecurity Fundamentals: A Practical Guide to Essential Cybersecurity Concepts
Dove, Nicole
Paperback
Hackers Underground Knowledge: Quick and easy way to learn secret hacker techniques
Kohler, Martin
Paperback
A Hacker's Mind: How the Powerful Bend Society's Rules, and How to Bend Them Back
Schneier, Bruce
Paperback
The Cybernetic Society: How Humans and Machines Will Shape the Future Together
Husain, Amir
Hardcover
Privacy and Security for Large Language Models: Hands-On Privacy-Preserving Techniques for Personalized AI
Lin, Baihan
Paperback
Data Engineering for Cybersecurity: Build Secure Data Pipelines with Free and Open-Source Tools
Bonifield, James
Paperback
The Smartest Person in the Room: The Root Cause and New Solution for Cybersecurity
Espinosa, Christian
Paperback
The Book of Pf, 4th Edition: A No-Nonsense Guide to the OpenBSD Firewall
Hansteen, Peter N. M.
Paperback
Digital Ethics in the Age of AI: Navigating the ethical frontier today and beyond
Mehan, Julie
Paperback
AI Governance Playbook: How to Secure, Control, and Optimize Artificial Intelligence Initiatives
Surdak, Chris
Smallwood, Robert F.
Paperback
Understanding Digital Resilience: Foresight and Navigation through Cyber Heavy Weather
Rattray, Gregory
Lee, Seungmin Helen
Pelekis, Ian
Paperback
Hacking and Security: The Comprehensive Guide to Penetration Testing and Cybersecurity
Kofler, Michael
Gebeshuber, Klaus
Kloep, Peter
Paperback
The Secure Board: How To Be Confident That Your Organisation Is Cyber Safe
Pales, Claire
Leibel, Anna
Paperback
Dissecting the Dark Web: Reverse Engineering the Tools of the Underground Economy
Kaye, Lindsay
Paperback
Cilium: Up and Running: Cloud Native Networking, Security, and Observability
Nikolic, Filip
Laverack, James
Vibert, Nico
Paperback
The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
Stuttard, Dafydd
Pinto, Marcus
Paperback
Comptia A+ Complete Practice Tests: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
O'Shea, Audrey
Paperback
Web Application Security: Exploitation and Countermeasures for Modern Web Applications
Hoffman, Andrew
Paperback
Learning Serverless Security: Hacking and Securing Serverless Cloud Applications on Aws, Azure, and Google Cloud
Lat, Joshua Arvin
Paperback
Meshtastic: A Comprehensive Guide to Off-Grid Mesh Communication: Second Edition
Rodgers, David A., Jr.
Paperback
Industrial Cybersecurity - Second Edition: Efficiently monitor the cybersecurity posture of your ICS environment
Ackerman, Pascal
Paperback
The Fraud Fighter's AI Playbook: Strategies for the Genai Era
Zamir, Chen
Saporta, Gilit
Maraney, Shoshana
Paperback
Cybersecurity - Attack and Defense Strategies - Third Edition: Improve your security posture to mitigate risks and prevent attackers from infiltrating
Diogenes, Yuri
Ozkaya, Erdal
Paperback
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Hardcover
Red Team Engineering: The Art of Building Offensive Tools and Infrastructure
Erdmann, Casey
Paperback
Zero Trust Networks: Building Secure Systems in Untrusted Networks
Morillo, Christina
Gilman, Evan
Rais, Razi
Paperback
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 1 Exam 220-1201
Chapple, Mike
Paperback
The Mathematics of Secrets: Cryptography from Caesar Ciphers to Digital Encryption
Holden, Joshua
Paperback
Evasion Engineering: Building Custom Red Team Tools for Modern Defenses
Lasalvia, Michael
Chow, Dennis
Paperback
Raising Humans in a Digital World: Helping Kids Build a Healthy Relationship with Technology
Graber, Diana
Paperback
Cism Certified Information Security Manager All-In-One Exam Guide [With CD (Audio)]
Gregory, Peter H.
Paperback
Learn Computer Forensics - Second Edition: Your one-stop guide to searching, analyzing, acquiring, and securing digital evidence
Oettinger, William
Paperback
Crypto Conned My 200K Nightmare: And 10 Key Steps To Safeguard Your Future
Holliday, Ed Doc
Paperback
Network Programmability and Automation: Skills for the Next-Generation Network Engineer
Lowe, Scott S.
Oswalt, Matt
Adell, Christian
Paperback
Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning
Fyodor
Lyon, Gordon
Paperback
Building a Career in Cybersecurity: The Strategy and Skills You Need to Succeed
Diogenes, Yuri
Paperback
Scams, Hacking, and Cybersecurity: The Ultimate Guide to Online Safety and Privacy
Brooks-Kempler, May
Paperback
Identity Attack Vectors: Strategically Designing and Implementing Identity Security, Second Edition
Rolls, Darran
Haber, Morey J.
Paperback
Software Security for Developers: With Examples in Java and Spring
Saikali, Adib
Spilca, Laurentiu
Paperback
Wireless Exploits And Countermeasures: Kali Linux Nethunter, Aircrack-NG, Kismet, And Wireshark
Botwright, Rob
Paperback
Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools
Jaswal, Nipun
Paperback
Isc2 Ccsp Certified Cloud Security Professional Official Study Guide & Practice Tests Bundle
Seidl, David
Chapple, Mike
Paperback
Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls That Derail Us
Dykstra, Josiah
Spafford, Eugene
Metcalf, Leigh
Paperback
Mastering Linux Security and Hardening - Third Edition: A practical guide to protecting your Linux system from cyber attacks
Tevault, Donald a.
Paperback
Agentic AI for Offensive Cybersecurity: Build and automate smarter penetration testing workflows using AI-driven agents
Yıldırım, Orhan
Paperback
Locksport: A Hackers Guide to Lockpicking, Impressioning, and Safe Cracking
Weyers, Jos
Burrough, Matt
Belgers, Walter
Paperback
Cisco ASA for Accidental Administrators: An Illustrated Step-by-Step ASA Learning and Configuration Guide
Crawley, Don R.
Paperback
Operation Carder Kaos: How One Agent Penetrated the Underground Economy
Latulip, Richard K.
Paperback
Hacking: Computer Hacking for beginners, how to hack, and understanding computer security!
Dodson, Adam
Hardcover
Machine Learning and Security: Protecting Systems with Data and Algorithms
Chio, Clarence
Freeman, David
Paperback