are still being researched, recommended, and implemented.
DHS’s Security in the Software Life Cycle includes a significant discussion
of the current state-of-the-art in secure SCM practices, as well as summary of
“security enhancements” that can be added to current SCM practices, such as—