moai-ref-supply-chain

Generate an SBOM at build time using syft, which emits both SPDX and CycloneDX formats from an artifact or source tree. Include the NTIA minimum elements such as supplier, version, and dependency relationships, and attach it as a signed attestation.

SPDX is a Linux Foundation ISO standard focused on license compliance with broad regulatory acceptance. CycloneDX is an OWASP format focused on security with native vulnerability and dependency-relationship modeling.

Defend against dependency confusion by reserving your namespace on public registries, pinning internal names to resolve only from the internal registry, and hash-pinning every dependency in the lockfile. A registry proxy that refuses public fallback for internal names adds another layer.

Production environments typically require SLSA Build L2 or higher, meaning signed provenance from a hosted build platform. High-assurance environments require L3, where the build runs in an isolated, ephemeral environment with non-forgeable provenance.

Verify artifacts at install or admission time using cosign verify with the expected certificate identity and OIDC issuer. Verification fails closed, so unsigned or wrong-identity artifacts are rejected before acceptance.

This reference does not cover offensive techniques, LLM-specific security such as model provenance, or web-application OWASP Top 10 issues. Use moai-ref-llm-security or moai-ref-owasp-checklist for those domains.