Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
安装
npx skills add microsoft/hve-core --skill supply-chain-securitynpx skills add microsoft/hve-core --skill supply-chain-security -a claude-code -gnpx skills add microsoft/hve-core --skill supply-chain-security -a codex -ggemini skills install https://github.com/microsoft/hve-core.git --path .github/skills/security/supply-chain-securitygh skill install microsoft/hve-core supply-chain-securitygit clone --depth 1 https://github.com/microsoft/hve-core /tmp/microsoft__hve-core
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/microsoft__hve-core/.github/skills/security/supply-chain-security ~/.claude/skills/supply-chain-security # Claude Code
cp -R /tmp/microsoft__hve-core/.github/skills/security/supply-chain-security ~/.agents/skills/supply-chain-security # Codex, Cursor, Gemini CLI, Copilot, OpenCode