Labs Paths ConsultantSupply Chain Security

Consultant Track•Advanced

Supply Chain Security

Master the "massive" field of Software Supply Chain Security. Deep dive into SCA, SBOM (CycloneDX/SPDX), VEX, and secure CI/CD pipelines.

10 hours

11 lessons

4.8

+620 XP

Pro Access

Unlock full access to all 11 lessons and earn 620 XP.

Course Content3 modules • 11 lessons

Module 1

Software Composition Analysis (SCA)

0/3

Introduction to SCA

20 min•theory•+30 XP

Dependency Enumeration

30 min•lab•+50 XP

Risk Mapping & Prioritization

25 min•theory•+40 XP

Module 2

Software Bill of Materials (SBOM)

0/4

SBOM Fundamentals

25 min•theory•+40 XP

CycloneDX vs SPDX Standards

30 min•lab•+60 XP

VEX (Vulnerability Exploitability eXchange)

30 min•lab•+60 XP

Scaling SBOM Management

25 min•theory•+40 XP

Module 3

Secure Build & Provenance

0/4

Build System Attestation (SLSA)

30 min•theory•+50 XP

Pipeline Security (in-toto)

30 min•lab•+60 XP

Policy as Code Enforcement

25 min•theory•+40 XP

Supply Chain Risk Assessment

45 min•challenge•+150 XP