Software supply chain, SSDF, SLSA, OpenSSF, SBOM: Use when assessing secure development, build provenance, dependencies, CI/CD, release integrity, or artifact trust.
