Reference: Dead Link to CNCF_SSCP_v1.pdf

[laenan8466]

Dead Link

The link https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf in

s2c2f/specification/framework.md

Line 410 in af55382

- [tag-security/CNCF\_SSCP\_v1.pdf at main · cncf/tag-security (github.com)](https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf)

is no longer functional.
It seems to have moved to https://github.com/cncf/tag-security/blob/main/community/working-groups/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf.

Suggestion: Change Link and use perma-link: https://github.com/cncf/tag-security/blob/554168c3addcb49a1a21c9ca2aa0c95ff9192a76/community/working-groups/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf

Withdrawn reference

s2c2f/specification/framework.md

Line 405 in af55382

- [Supply Chain Risk Management Practices for Federal Information Systems and Organizations (nist.gov)](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-161.pdf)

This specification was withdrawn. The newest version can be found here: https://doi.org/10.6028/NIST.SP.800-161r1-upd1. I have not checked if they are comparable from their content and this might affect further references in the specification. Not sure if this should be fixed.

Login needed for reference

s2c2f/specification/framework.md

Line 407 in af55382

- [CIS WorkBench / Benchmarks (cisecurity.org)](https://workbench.cisecurity.org/benchmarks/7555)

This reference cannot be accessed without login.

For 1+2 I'm happy to contribute with a PR, if you agree on the change & accept PRs from strangers.