OSC&R open software supply chain attack framework now on GitHub

OSC&R is an open framework for understanding and evaluating software supply chain security threats. It has received the endorsement of former U.S. NSA Director Admiral Mike Rogers and is now available on GitHub.