Dynamic pipelines must be continuously monitored for security. In SLSA Cybersecurity Framework (Supply Chain Levels for Software Artifacts), four levels of protection for software supply chains are defined, along with guidelines on how to reach each level.You need to follow best practices for implementing automation, using open-source tools such as Sigstore and OPA, just to name a few.