ESF steps up supply chain security guidance with call for binary analysis

One of the more significant aspects of a new document on software supply chain security from the Enduring Security Framework (ESF) is the recommendation of binary analysis and reproducible builds as best practices.

analysis appsec & supply chain security best practices binary binary analysis call document esf framework guidance practices security security framework security guidance software software supply chain software supply chain security supply supply chain supply chain security