Evidence search
Search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Results for “Software supply chain”
4 publicationsTrack EU AI Act deadlines after the Digital Omnibus delay
The Digital Omnibus moved high-risk AI duties to December 2027 and August 2028, but prohibitions, AI literacy and Article 50 transparency already apply. See which dates moved and what cloud teams should build now.
AI systems · European Union / European Commission · By Cloud Security DeskSecurity evidence for AI release decisions
A release approval should identify the changed application, the claims its tests support and the evidence that expires when a model, prompt, data path or runtime changes.
AI systems · By Cloud Security DeskTurn SBOM and VEX records into patch decisions
A VEX statement is an assertion about a specific product and vulnerability. Match its scope and conditions before using it to suppress a finding.
Workload security · CISA / OpenVEX / CycloneDX / OASIS · By Cloud Security DeskTreat model downloads as software supply chain changes
Review weights, custom code, dependencies, and runtime authority as separate decisions before promoting a downloaded model into a trusted environment.
AI systems · Hugging Face · By Cloud Security Desk