---
title: "Introducing Deputy: Better signal and control for software supply chains"
url: https://daily.dev/posts/introducing-deputy-better-signal-and-control-for-software-supply-chains-iiqu8m3zr
source_url: https://temporal.io/blog/introducing-deputy
type: article
source: "Temporal"
published: 2026-08-06T10:37:29.233Z
updated: 2026-08-24T06:55:05.729Z
tags: ["security"]
reading_time: 9
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Introducing Deputy: Better signal and control for software supply chains

**[Temporal](https://daily.dev/sources/temporal)** · 9 min read · 0 upvotes · 0 comments

## Summary

Deputy is a new open-source, CLI-first security toolchain from Temporal's security team designed to address the fragmented, noisy state of software supply chain security. It inventories and scans dependencies across repositories, container images, VM disk images, SBOMs, and individual packages. A key feature is its YAML/CEL-based policy system that travels with the work — usable locally, in CI, and at download time — enabling precise rules like exploit-signal gating (CISA KEV, EPSS), vulnerability SLAs with grace periods, and typosquatting detection for npm packages. Deputy also includes `deputy exec` for sandboxed package manager commands and `deputy proxy` for enforcing policies at download time across Go, npm, PyPI, RubyGems, and OCI registries. It exposes an MCP server for integration with AI coding agents. Built under Apache 2.0 and installable via `go install github.com/temporalio/deputy@latest`.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://temporal.io/blog/introducing-deputy>

## Similar posts on daily.dev

- [Cloudsmith Brings Threat Intelligence to Software Artifacts](https://daily.dev/posts/cloudsmith-brings-threat-intelligence-to-software-artifacts-lokb9anvc) · DevOps.com · 0 upvotes · 0 comments
- [Chainguard thinks most DevOps teams are solving container security the hard way](https://daily.dev/posts/chainguard-thinks-most-devops-teams-are-solving-container-security-the-hard-way-noe4iglij) · The New Stack · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security)

[View this post on daily.dev](https://daily.dev/posts/introducing-deputy-better-signal-and-control-for-software-supply-chains-iiqu8m3zr)