Mitigation Guidance for Supply Chain Compromise | Google Cloud Blog
…Secure code-signing certificates using Hardware Security Modules (HSMs) or vaulting solutions. Monitor public transparency ledgers and logs to detect any unauthorized certificate activity. Hardened Distribution Points: Audit and lock down software…