Supply Chainhttps://docs.sysdig.com/en/sysdig-secure/supply-chain/Recent content on Supply ChainenThu, 01 Oct 2026 11:53:24 +0100 https://docs.sysdig.com/icons/sysdig-horizontal.pngSupply Chainhttps://docs.sysdig.com/en/sysdig-secure/supply-chain/Sysdig logoSupply Chain - Overviewhttps://docs.sysdig.com/en/sysdig-secure/supply-chain/#overviewSupply Chain Security in Sysdig Secure shows the risk that comes with the open source and third-party components you ship. It answers two questions about each component that Sysdig detects:Supply Chain Security in Sysdig Secure shows the risk that comes with the open source and third-party components you ship. It answers two questions about each component that Sysdig detects:

  • Does the license of the component put obligations or restrictions on your organization?
  • Does the vendor of the component still support it?

Sysdig takes this data from the same scans that Vulnerability Management uses. You do not install or configure a separate scanner.

Feature Availability

License information and Supply Chain Findings are in Technical Preview.

They are available to all Sysdig Secure SaaS deployments.

]]>OverviewSupply Chain - Supply Chain Capabilitieshttps://docs.sysdig.com/en/sysdig-secure/supply-chain/#supply-chain-capabilitiesCapability What it does Supply Chain Findings Lists the license and end-of-life findings across your pipeline, registry, and runtime resources. License Classification Explains how Sysdig resolves the license of each package to a category, and which categories raise a finding. Software Lifecycle and End-of-Life Visibility Explains the lifecycle states, the supported operating systems and runtimes, and the Component Lifecycle policy rule. License Information in the CLI Scanner Shows licenses in the console output and in the JSON scan result of the CLI Scanner. Supply Chain Policies Admits only container images with a valid signature into your clusters. Capability What it does Supply Chain Findings Lists the license and end-of-life findings across your pipeline, registry, and runtime resources. License Classification Explains how Sysdig resolves the license of each package to a category, and which categories raise a finding. Software Lifecycle and End-of-Life Visibility Explains the lifecycle states, the supported operating systems and runtimes, and the Component Lifecycle policy rule. License Information in the CLI Scanner Shows licenses in the console output and in the JSON scan result of the CLI Scanner. Supply Chain Policies Admits only container images with a valid signature into your clusters. ]]>Supply Chain Capabilities