Protecting software supply chain using secure log generated in a trusted build environment

An apparatus comprising:

• processor circuitry coupled to a memory, the processor circuitry to:
• generate a trusted log comprising a plurality of records of actions performed during a software build process;
• aggregate the plurality of records of actions into a build certificate file;
• apply a digital signature to the build certificate;
• and
• publish the build certificate, wherein the digital signature is generated and associated with the built certificate file, wherein the built certificate file is published in association with one or more built artifacts generated based on the software-built process in a trusted built environment.

At least one non-transitory computer-readable medium having stored thereon instructions which, when executed, cause a computing device to perform operations comprising:

• generate a plurality of records of actions performed during a software build process;
• aggregate the plurality of records of actions into a build certificate file;
• apply a digital signature to the build certificate;
• and
• publish the build certificate, wherein the digital signature is generated and associated with the built certificate file, wherein the built certificate file is published in association with one or more built artifacts generated based on the software-built process in a trusted built environment.