Common mitigation measures for supply chain poisoning include hash and signature verification of imported artifacts, maintaining a private image registry within the isolated zone, source-level auditing of third-party dependencies, and provenance tracking of datasets.