Gartner LP Shadow Hero
Complimentary research

How Software Engineering Leaders Can Mitigate Software Supply Chain Security Risks

Explore potential software supply chain security risks and the strategies software engineering teams can use to counter them.

Get the research
Gartner SSC Asset 1

Optional heading that can be visually hidden

Gartner SSC Asset 1

Read the Report to Learn About:

The methods attackers use to compromise continuous integration/continuous delivery (CI/CD) systems and inject malware into legitimate software

How to protect the integrity of internal and external source code

How to prevent cloned repositories from becoming a treasure trove for attackers looking to steal credentials, API keys or secrets

How to manage the risks associated with the use of third-party software

How to harden the software development and delivery pipeline

How Software Engineering Leaders Can Mitigate Software Supply Chain Security Risks. By Manjunath Bhat, Dale Gardner, Mark Horvath. Published 15 July 2021. Refreshed 22 November 2022.

GARTNER is a registered trademark and service mark of Gartner, Inc., and/or its affiliates and is used herein with permission. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Get the Gartner Research

By supplying my personal information and clicking submit, I agree to receive communications about DigiCert products and services, and I agree to DigiCert and its affiliates processing my data in accordance with DigiCert's Privacy Policy.

  • DigiCert Logo

    The most-trusted global provider of high-assurance TLS/SSL, PKI, IoT and signing solutions.