Artifacts to Actors: Assessing the Maturity of Software Supply Chain Security Measurement Practices
The findings indicate that industry measurement remains largely tool-driven, emphasizing artifact properties that can be readily automated, and more holistic assessments will require practitioners and researchers to develop and validate complementary measures of people and practices.
Alexis Butler, Dan O'Keeffe, Santanu Kumar Dash
· 0 citations