phase-2-automation-weeks-5-8

name	phase-2-automation-weeks-5-8
description	Automation phase SDLC hardening overview. CI/CD gates, SBOM generation, vulnerability scanning, SLSA provenance, and automated evidence collection for secure software supply chain enforcement.

Phase 2: Automation (Weeks 5-8)

When to Use This Skill

Phase 2 extends enforcement into the CI/CD pipeline through two critical areas:

1. CI/CD Gates - Required checks, SBOM generation, vulnerability scanning, SLSA provenance
2. Evidence Collection - Automated archival and metrics tracking

These controls ensure failing builds never reach production and provide audit evidence.

---

Implementation

See the full implementation guide in the source documentation.

Related Patterns

• SLSA Provenance
• SBOM Generation
• Vulnerability Scanning
• Implementation Roadmap Overview
• Phase 1: Foundation
• Phase 3: Runtime →

References

• Source Documentation
• AEL Enforce