Audit Your Software Supply Chain for CIS Compliance

Aqua Security introduces Chain-bench, an open-source tool that audits software supply chains for compliance with the CIS Software Supply Chain Security Guide. Chain-bench runs around 100 checks across source code, build pipelines, dependencies, artifacts, and deployment phases, provides remediation guidance tied to CIS controls and the Aqua Vulnerability Database (AVD), and is presented as a community-driven project with installation instructions and invitations for contributions.