A security team determines that the most significant risks within the pipeline are: - Unauthorized code changes - The current inability to perform independent verification of software modules Which…

Code signing uses digital signatures to verify the authenticity and integrity of software, ensuring that the code has not been tampered with since it was signed and identifying the publisher. This directly addresses unauthorized code changes and enables independent verification of software modules.

Digital signatures are the underlying technology for code signing, but 'code signing' is the more specific and complete solution for verifying the integrity and authenticity of software modules.

Non-repudiation is the assurance that an action cannot be denied, a property enabled by digital signatures, but it is not a direct mechanism for preventing unauthorized code changes or verifying software modules on its own.

Lightweight cryptography refers to encryption algorithms designed for resource-constrained environments and does not directly address unauthorized code changes or software module verification.