Software Supply Chain Glossary
A comprehensive collection of terms, concepts, and definitions related to software supply chain management.
D
Dependency Confusion
A software supply chain attack where malicious packages with the same name as internal dependencies are published to public repositories, tricking build systems into using the malicious version.
Dependency Pinning
Dependency pinning is the practice of locking software dependencies to specific versions to ensure build reproducibility, stability, and security in the software supply chain.
Dependency
External software packages or components that a project uses or relies on to function properly.
DevSecOps
An approach to culture, automation, and platform design that integrates security as a shared responsibility throughout the entire IT lifecycle, from initial development through production deployment and beyond.
DevOps Research and Assessment (DORA)
A research program that establishes metrics and benchmarks for measuring software delivery performance and organizational effectiveness in technology organizations.