tree 0ee8a50baccc14390f3f53c1fb87da8c42b617ac
parent c610b3529170e703bab0606e9604d775835645f1
author laurenw-arm <lauren.wehrmeister@arm.com> 1702069207 -0600
committer laurenw-arm <lauren.wehrmeister@arm.com> 1705697424 -0600

docs(threat-model): supply chain threat model TF-A

Software supply chain attacks aim to inject malicious code into a
software product. There are several ways a malicious code can be
injected into a software product (open-source project).

These include:
- Malicious code commits
- Malicious dependencies
- Malicious toolchains

This document provides analysis of software supply chain attack
threats for the TF-A project

Change-Id: I03545d65a38dc372f3868a16c725b7378640a771
Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com>