Frontispiece

About the Standard

The Software Component Verification Standard is a grouping of controls, separated by control family, which can be used by architects, developers, security, legal, and compliance to define, build, and verify the integrity of their software supply chain.

Copyright and License

This document is released under the Creative Commons Attribution ShareAlike 4.0 license. For any reuse or distribution, you must make clear to others the license terms of this work.

Version 1.0, 25 June 2020

Project Leads

Steve Springett

Contributors and Reviewers

Dave Russo
Garret Fick
JC Herz
John Scott
Mark Symons
Pruthvi Nallapareddy
Bryan Garcia

The Software Component Verification Standard is built upon the shoulders of those involved. The project is inspired by the OWASP Application Security Verification Standard and the work of their contributors.

If a credit is missing from the credit list above, please contact [email protected] or log a ticket at GitHub to be recognized in future updates.

Preface