Indicators for software component management
Gain visibility into code and dependencies used across your organization. This capability helps manage and secure all software components, from in-house libraries to third-party dependencies, thereby increasing the security and reliability of the development process.
Indicators
[DL.SCM.1] Use a version control system with appropriate access management
[DL.SCM.3] Use artifact repositories with enforced authentication and authorization
[DL.SCM.5] Maintain an approved open-source software license list
[DL.SCM.8] Use a versioning specification to manage software components
[DL.SCM.9] Implement plans for deprecating and revoking outdated software components
[DL.SCM.10] Generate a comprehensive software inventory for each build