a software supply chain security framework developed at the NYU Tandon School of Engineering. CNCF is the open source, vendor-neutral hub of cloud native computing, hosting projects like ...