The security blog by #Google
is true gold!
It really helped me to learn more about software supply chain security things including #deps.dev, #go, #SLSA, #SBOM, #scorecard, #distroless, and many more!
I highly recommend you take a look at this blog!
https://security.googleblog.com/2023/04/celebrating-slsa-v10-securing-software.html