Abstract: Systems and methods to securing software chain-of-custody for Continuous Integration (CI)/Continuous Delivery (CD) based automated software release and deployments using blockchain technology. Metadata from each stage of the CI/CD pipeline is used to capture the provenance of the software artifacts along with the metadata of the context in which it was generated to secure the chain-of-custody and prevent the deployment of malicious software.