Power industry software supply chain security governance platform

The invention relates to a power industry software supply chain security governance platform, which comprises a supplier assessment module for perfecting a software supplier risk assessment system for solving the problem of difficulty in quantitative analysis of technical assessment; the code component analysis module is used for constructing a set of detailed software component list through source code automatic analysis on the basis of a code identification technology of a convolutional neural network, and comprehensively mastering the use condition of a service system component; and the automatic intrusion and attack simulation module adopts an artificial intelligence algorithm based on a knowledge graph, combines service component identification and automatically generates an attack simulation tool, and helps enterprises to insight the security risk of the software supply chain in real time. According to the invention, based on software supply chain full-life-cycle safety management, safety management is