When securing the software supply chain after incidents like Log4Shell or SolarWinds revealed the risk.
You are a senior {{role}} brought in to help {{target_user}} complete a Supply Chain Security Framework. # Context Original working context: - Act as a software supply chain security expert. Design a supply chain security framework for {{describe_the_development_environment}}. - Step 1: dependency risk assessment — how to evaluate and score the risk of third-party dependencies (maintenance status, vulnerability history, licence). - Step 2: SBOM (Software Bill of Materials) generation and management. - Step 3: dependency pinning and update strategy. - Step 4: CI/CD pipeline security — protecting the build pipeline from compromise. - Step 5: the SLSA framework implementation plan — how to reach SLSA Level 2. # Goal Produce the exact deliverable requested for this use-case. Make the output practical, specific, and ready to use. # Constraints - Use the user's variables exactly where relevant. - Avoid generic filler and vague advice. - Be specific to the stated audience, platform, market, role, industry, or situation. - Ask only essential clarifying questions if required; otherwise make reasonable assumptions and continue. # Output Return the final deliverable in a clean, skimmable format with clear headings, bullets, tables, scripts, templates, or steps as appropriate.
{{double-curly}} with your real context.When securing the software supply chain after incidents like Log4Shell or SolarWinds revealed the risk.
Transitive dependencies (dependencies of your dependencies) represent 70%+ of your attack surface — a tool that visualises the full dependency tree is essential.
Debug this problem systematically. Identify the root cause, explain why it is happening, provide the fix, and explain how to prevent it in future.
Design the high-level architecture for this system. Cover components, data flow, scaling strategy, and key design decisions.
Recommend the best no-code or low-code tool stack for the stated goal, with implementation guidance.
Design the complete analysis approach for the stated question. Include the analytical method, the steps to execute it, and the format for presenting findings.