Abstract

This chapter emphasizes the critical need for securing the software supply chain in modern development, where applications rely heavily on external components. It introduces RESCALE, a comprehensive framework that integrates advanced security testing with blockchain technology to create a Trusted Bill of Materials (TBOM). This TBOM provides transparency and trust by recording the security status of both hardware and software components, mitigating risks associated with vulnerabilities and supply chain attacks.