testers, or external attackers to tamper with the source code or executables. CM
activities place additional control over a project, intentionally separating the
role for managing configurable items from the developer or tester.
Security for software configuration management (SCM) practices and