Necessary storage
Your selected language is stored for twelve months. This setting and the choice made here are used only to operate this website.
Foundations & Standards · Software supply chain
Secure Software Delivery Foundation
A controlled delivery path from source and dependencies through builds, tests and security gates to signed releases and traceable deployments.
SSDFEngineering foundation
Foundations & Standards · Orthevs
Secure Software Delivery Foundation in the engineering model
This Foundation describes reusable engineering knowledge. Its suitability is assessed against a specific Contract; an approved Baseline binds versions, dependencies and evidence to a project.
Solution mission
Secure Software Delivery Foundation
The Foundation is intended to describe the technical and organizational handovers of a software supply chain as a versioned workflow and preserve the provenance of every released artifact.
Composition
Orthevs Ecosystem
Factories provide build, test, scan, packaging and deployment capabilities. Policy, qualification and evidence engines evaluate transitions without taking over the Labs' domain responsibility.
Process and workflow focus
Process and workflow focus
- Pin sources, dependencies and build environment
- Run quality, security and approval checks
- Connect SBOM, provenance, signatures and evidence
- Document deployment and withdrawal under control
Acceptance and boundaries
Acceptance and boundaries
The Foundation does not replace product-specific security reviews or organizational approvals.
Supported toolchains and target environments must be stated explicitly for each release.
SSDF · Orthevs
Shape the target model together.
The content will be deepened step by step with concrete concepts, contracts, maturity levels and verifiable evidence.