# SEC06-BP06: Validate software integrity

## Description

Code signing, image scanning.

## Implementation Guidance

- Container image signing
- Verified base images
- SBOM generation
- Supply chain security
- Binary authorization

## Risk Level

High - Unsigned software may be tampered.
