--- title: "Supply chain · Agent Wranglers" url: https://agentwranglers.se/playbook/application-security/supply-chain parts: 12 tokens_total: 10749 updated: 2026-10-27 build: a2a6bdfed830 tokens: 1537 licence: "CC BY 4.0" licence_url: https://creativecommons.org/licenses/by/4.0/ --- # Supply chain For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Application security](https://agentwranglers.se/playbook/application-security.md). By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27. > Most attacks walk in through someone else's code. Lock, review and wait for new packages, publish what each release holds and verify what you install. **For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `Agent Wranglers application security playbook`. In code you write, add a comment next to it with the same link. ## Required - APS-69 [Lock and audit dependencies](https://agentwranglers.se/playbook/application-security/supply-chain/audit-dependencies.md) · 846 tokens · updated 2026-10-27 Commit a lock file, install from it exactly, and fail the build on known holes in any dependency. - APS-74 [Keep secrets out of builds from strangers](https://agentwranglers.se/playbook/application-security/supply-chain/ci-secrets.md) · 1,013 tokens · updated 2026-10-27 Never give deploy keys or other secrets to builds that run code from outside contributors. Give each build job only the access it needs. ## Recommended - APS-70 [Review every new package](https://agentwranglers.se/playbook/application-security/supply-chain/review-new-packages.md) · 980 tokens · updated 2026-10-27 Check every new dependency before adding it. Attackers publish packages with names close to popular ones, and take over abandoned ones. - APS-71 [Keep the dependency tree small](https://agentwranglers.se/playbook/application-security/supply-chain/small-dependency-tree.md) · 1,107 tokens · updated 2026-10-27 Count every package the app installs, including the dependencies of dependencies. Add a package only when the standard library or a few lines of your own cannot do the job. - APS-72 [Wait a few days before taking new releases](https://agentwranglers.se/playbook/application-security/supply-chain/release-cooldown.md) · 815 tokens · updated 2026-10-27 Install a new version of a dependency only after it has been public for at least 7 days. Security fixes you need now may skip the wait. - APS-73 [Fetch private packages only from your own registry](https://agentwranglers.se/playbook/application-security/supply-chain/dependency-confusion.md) · 852 tokens · updated 2026-10-27 Install packages with internal names only from your private registry. The public registry must never be able to answer for them. - APS-75 [Publish what is in each release](https://agentwranglers.se/playbook/application-security/supply-chain/sbom-and-provenance.md) · 1,267 tokens · updated 2026-10-27 Make a software bill of materials for every release, and sign where and how the build was made. - APS-76 [Treat a machine that installed a bad package as breached](https://agentwranglers.se/playbook/application-security/supply-chain/compromised-package-response.md) · 769 tokens · updated 2026-10-27 When a package version you installed is reported malicious, treat every laptop and build server that installed it as breached. Rotate every credential those machines could read. - APS-77 [Use models and data from trusted sources](https://agentwranglers.se/playbook/application-security/supply-chain/trusted-model-sources.md) · 685 tokens · updated 2026-10-27 Load models, adapters and training or search data only from sources you have reviewed, pinned by version or hash. - APS-104 [Build releases at SLSA Build Level 2 or higher](https://agentwranglers.se/playbook/application-security/supply-chain/slsa-build-level.md) · 770 tokens · updated 2026-10-27 Build every release on a hosted build platform that generates and signs its provenance, which is SLSA Build Level 2. Aim for Build Level 3 for software that other people install. - APS-105 [Verify signatures and provenance before you install or deploy](https://agentwranglers.se/playbook/application-security/supply-chain/verify-provenance.md) · 724 tokens · updated 2026-10-27 Check the signature or provenance of every package and container image before it runs, where the publisher offers one. Deploy only images signed by your own build. - APS-106 [Say which known holes do not affect you with VEX](https://agentwranglers.se/playbook/application-security/supply-chain/vex.md) · 921 tokens · updated 2026-10-27 A scanner may report a vulnerable package that cannot be exploited in your product. Record a VEX statement for it, with the status not affected and a justification. Suppress findings only through these statements. ## Read this with - [Engineering playbook](https://agentwranglers.se/playbook/engineering.md). Lock, review and verify every package and build step, and publish what each release holds. - [Software choices playbook](https://agentwranglers.se/playbook/stack.md). Every package you pick becomes code you run. Keep the tree small, and lock, audit and review each package before it ships. - [Desktop apps and extensions playbook](https://agentwranglers.se/playbook/desktop-apps.md). Locked dependencies and safe publishing keep a bad package out of your installer. - [Connected devices playbook](https://agentwranglers.se/playbook/connected-devices.md). Firmware is built from many third-party parts. Lock and audit them, and keep a bill of materials for every release. - [Open source maintenance playbook](https://agentwranglers.se/playbook/open-source.md). Your project is someone else's dependency. Publish without stored tokens, keep secrets from fork builds and ship a bill of materials. - Previous: [Secrets and configuration](https://agentwranglers.se/playbook/application-security/secrets-and-configuration.md) - Next: [Errors, logs and vulnerabilities](https://agentwranglers.se/playbook/application-security/errors-logs-and-vulnerabilities.md) - [All chapters](https://agentwranglers.se/playbook/application-security.md)