Address OWASP Top 10 A08 Software and Data Integrity Failures per OWASP Top 10:2025. Software and Data Integrity Failures arise from assumptions about software updates + critical data + CI/CD pipelines without verifying integrity including unsigned updates + insecure deserialisation + third-party script + tag injection + plugin compromise + supply chain attacks. Mitigations include (a) implement code signing + signature verification for software updates + plugins + (b) implement secure CI/CD pipeline including signed artefacts + isolated build environments + integrity verification + (c) implement Subresource Integrity (SRI) for third-party scripts + (d) implement secure deserialisation including allow-list of accepted types + (e) implement third-party script + tag management with monitoring + (f) protect against supply chain attacks via dependency confusion + typosquatting + repository compromise.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.