Overview
What this challenge is about.
Secure the Software Supply Chain of an Open-Source SDK. Advanced challenge in code. Writing production code that solves real engineering problems, earn a blo...
The Brief
What you'll do, and what you'll demonstrate.
Harden the supply chain of an open-source SDK to SLSA Level 3 and publish SBOM + attestations on every release.
This is not a coding exercise. It is the work a software engineer does between a Jira ticket and a merged PR. That distinction matters to every hiring manager who has seen candidates solve LeetCode problems and none who have shipped production code under real constraints.
When you finish, you will have something most graduates do not: a real-world deliverable, verified by Ewance, that you can show to a hiring manager and say "I did this. Here is the proof."
Earning criteria — what you'll demonstrate
- Generate SBOMs and attach them to releases
- Implement SLSA Level 3 build provenance using GitHub Actions
- Sign commits + releases with Sigstore + Cosign
- Author a public supply-chain policy users and security researchers trust
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Aligned coursework coming soon.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Supply Chain Security
Apply supply chain security to solve real industry problems and demonstrate production-level capability.
- Slsa
Apply slsa to solve real industry problems and demonstrate production-level capability.
- Sbom
Apply sbom to solve real industry problems and demonstrate production-level capability.
- Sigstore
Apply sigstore to solve real industry problems and demonstrate production-level capability.
- Dependency Management
Apply dependency management to solve real industry problems and demonstrate production-level capability.
- Secure Ci Cd
Apply secure ci cd to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles: