The statistic that 94% of code repositories rely on open-source software highlights which focus area?

• A. Supply Chain
• B. Code
• C. Environments
• D. Shift-Left

Answer: (A)

Relying on open-source software across the vast majority of repositories points to the software supply chain as the main focus. When most of what a project uses comes from external components, the key risk isn’t just the in-house code it produces, but the provenance, security, and licensing of those dependencies. This is why supply chain security—keeping an accurate inventory of components (an SBOM), scanning for vulnerabilities, ensuring trusted sources, and patching components—is the central concern. The other options miss this emphasis: the code you write yourself, the environments where it runs, and the practice of moving security left are all important, but the statistic specifically highlights dependency management and provenance as the core area.