# DevSecOps and the software supply chain · Finding and retest record

Blank workpaper, not completed testing or approval. Do not include secrets or real personal data.

## Prerequisites / minimal reproduction

[ ] Complete; add evidence and owner.

## Expected / actual / business impact

[ ] Complete; add evidence and owner.

## Fix owner / revision / rationale

[ ] Complete; add evidence and owner.

## Original / variant / legitimate-flow retest

[ ] Complete; add evidence and owner.

## Module-specific evidence

- Tool/rule/version/scope and exit codes
- Digest-bound SBOM, provenance and approval