Supply Chain Phishing Resistance

Supply Chain Phishing Resistance is a security identity control that reduces success of credential theft attacks for dependencies, builds, and artifacts. It uses passkeys, hardware-backed factors, and origin checks so teams can protect sign-in flows while keeping evidence, reliability, and public-safe operational boundaries clear.

“The security team used Supply Chain Phishing Resistance when a package update arrived, so the team could protect sign-in flows before the risk review began.”