add maven-lockfile

Signed-off-by: Martin Monperrus <[email protected]>
cncf · Sep 14, 2024 · 8bf5909 · 8bf5909
1 parent d8767bf
commit 8bf5909
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/community/publications/supply-chain-security-tools/securing-build-pipelines.md b/community/publications/supply-chain-security-tools/securing-build-pipelines.md
@@ -69,6 +69,7 @@ Here are the list of requirements for securing build pipelines. Each one has a l
 ### Tools
 
 - apko
+- [maven-lockfile](https://github.com/chains-project/maven-lockfile/) for Java/Maven
 
 ## 6. Find and Eliminate Sources Of Non-Determinism