Blog Post

Microsoft Security Community Blog
4 MIN READ

Microsoft Leads a New Era of Software Supply Chain Transparency

ShubhraS's avatar
ShubhraS
Icon for Microsoft rankMicrosoft
Jun 15, 2026

Microsoft has launched the general availability of Microsoft’s Signing Transparency (MST), a pioneering solution for software supply chain integrity based on the SCITT standard. This initiative enhances trust by logging every critical software build in an open, tamper-evident blockchain based ledger. This advancement exemplifies Microsoft's commitment to Zero Trust principles and industry-wide transparency. This service is currently providing transparency for Microsoft services like Microsoft Azure Attestation, Managed HSM, Azure confidential ledger, and Microsoft Signing Transparency.

Today, Microsoft announces the general availability of Microsoft’s Signing Transparency (MST) – a first-of-its-kind capability that brings unprecedented visibility and trust to our software supply ch...
Updated Jun 22, 2026
Version 4.0
audit
azure
compliance
compliance management
developer productivity
devsecops
microsoft azure attestation
records management
security
security community spotlight
imran-siddique's avatar
imran-siddique
Copper Contributor
Jun 19, 2026

On https://github.com/microsoft/agent-governance-toolkit - The Merkle-chained audit chain shipped in AGT is architecturally the same model as SCITT, self-hosted today, SCITT is the externalized standardized version. AGT's SBOM output (SPDX + CycloneDX) + Ed25519 signing maps directly to MST's artifact transparency use case. AGT's ADR-0009 cites RFC 9334 RATS Architecture, the exact framework SCITT integrates with for hardware attestation.