Establishing provenance and integrity for your projects

You can enforce immutable releases for a repository or organization to prevent potential vulnerabilities.

You can export a software bill of materials or SBOM for your repository from the dependency graph. SBOMs allow transparency into your open source usage and help expose supply chain vulnerabilities, reducing supply chain risks.