Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Presentation

Operationalizing SSDF Dependency Management and Vulnerability Response at Ecosystem Scale

September 22, 2026

Ankit Kumar Honey - GitHub

This presentation demonstrates why dependency security at ecosystem scale must be behavioral, enforced before install, risk-prioritized, and able to operate behind the air gap. The presentation is applicable to people in the following roles:

Software builders/operators
Security researchers/operations professionals
Policy makers/lawmakers

This presentation was part of the September 2026 Software and Supply Chain Assurance (SSCA) Forum.

Dependency Management at Scale (PDF)

Parent Project

See: Cybersecurity Supply Chain Risk Management

Operationalizing SSDF Dependency Management and Vulnerability Response at Ecosystem Scale

Presenters

Description

Downloads

Parent Project

Related Topics