{
  "id": "skill-area:supply-chain-security",
  "_kind": "SkillArea",
  "_file": "domain/skill-areas/skill-areas-security.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Software Supply Chain Security",
    "description": "SLSA framework, signed builds (Sigstore/cosign), provenance,\nartifact attestations, and reproducible builds.\n",
    "domains": [
      "specialization:security-research"
    ],
    "expertiseLevels": [
      "expert",
      "authoritative"
    ]
  },
  "outgoingEdges": [
    {
      "from": "skill-area:supply-chain-security",
      "to": "specialization:security-research",
      "kind": "applies_to",
      "attributes": {
        "confidence": "primary"
      }
    }
  ],
  "incomingEdges": [
    {
      "from": "skill-area:application-security",
      "to": "skill-area:supply-chain-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:SBOM-management",
      "to": "skill-area:supply-chain-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "stack-profile:container-registry-scanning",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_skill_area"
    },
    {
      "from": "lib-skill:code-migration-modernization--dependency-scanner",
      "to": "skill-area:supply-chain-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-skill:code-migration-modernization--license-compliance-checker",
      "to": "skill-area:supply-chain-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-skill:security-compliance--dependency-scanner",
      "to": "skill-area:supply-chain-security",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "responsibility:dependency-security",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "responsibility:supply-chain-integrity",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:dependency-updater-bot",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:security-engineer",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:security-reviewer",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "workflow:open-source-security-disclosure",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:fundraising-due-diligence-preparation",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:supply-chain-attack-simulation",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_skill_area",
      "attributes": {}
    }
  ]
}