Introduction The software supply chain has become a primary attack vector, with breaches like SolarWinds highlighting the catastrophic impact of compromised software. For cloud-native applications, the complexity of microservices, containers,…