Blogs

Ideas on Engineering, AI and Building Teams That Scale.

Hard-earned lessons in modern DevSecOps, GenAI-led Product Engineering, and Data Engineering from the front lines.

Blog

Featured · DevSecOps

SBOMs and Signed Artifacts: What They Do (and Do Not) Prove

Understand what SBOMs and signed artifacts prove, their limitations, and how they strengthen software supply chain security.

Upperthrust Team · Nov 2026
SBOMs and signed artifacts for software supply chain security

Get New Insights in Your Inbox

Occasional, practical writing on engineering, AI and building teams. No spam.