System and method for distributed ledger-based software supply chain management

A method for distributed ledger-based software supply chain management comprising:

• in an information processing apparatus comprising at least one computer processor:
• receiving a file of interest;
• generating a hash of the file of interest, wherein the hash uniquely identifies the file of interest;
• searching a present state database with the hash;
• receiving a record from the present state database that matches the hash;
• retrieving a block from a metadata store referenced by the record;
• and
• retrieving a file archive associated with the record.

A system for distributed ledger-based software supply chain management comprising:

• a plurality of software development tools;
• a controller;
• a metadata store, wherein the metadata store maintains an immutable record of a plurality of metadata artifacts;
• and
• a present state database comprising a key/value pair database, wherein each key is a value of stored metadata and references an underlying data source record;
• wherein:
• the controller receives a metadata artifact for a software development lifecycle event from one of the software development tools;
• the controller writes the metadata artifact to the metadata store;
• and
• the controller updates the present state database with values for metadata keys referencing the metadata artifact in the metadata store.