Senior Engineering & Research Practice

Supply Chain Security & Release Governance

60 min4 activities0 complete

1 of 4

Explore the idea

A Senior Engineer Owns The Release Surface

Opening your lesson…

Opening your space…

IN THIS LESSON

YOU’RE LEARNING TO

↗explain dependency pinning, lock files, hashes, vulnerability scanning, SBOMs, and trusted publishing

↗separate package metadata, dependency declarations, tool configuration, and build backend settings in pyproject.toml

↗design a safe release checklist for a Python package or service

↗identify supply-chain risk in a proposed dependency