Lightning Talk: DevSecOps for C++? Keep Calm and use Conan
summary
Shows that Conan source backups preserve removed sources, that conan graph info exposes why a transitive package exists, and that a full graph of 40+ transitive deps collapses to three rebuild targets so a hotfix ships quickly. Demonstrates generating a cycl DX SBOM for compliance and integrating with Artifactory and X‑ray to block tainted downloads, with the rebuild and policy checks completing the mitigation.
AI-written summary · about
related talks
05mLightning Talk: 5 Tactics To Forging a Hardened Software Chain
01h 20mContinuous Integration for Large Scale C/C++ Projects With Conan2
05mLightning Talk: It’s pronounced ‘DevOps.’ The ‘Sec’ is silent.
50mModern DevOps in C and C++
01h 01mGit, CMake, Conan - How to ship and reuse our C++ projects
57mUsing Conan in a real-world complex project
21mSecuring Diverse Supply Chains Across Interconnected Systems
42mThe Data Behind DevSecOps: The Power of Hindsight to Protect your Supply Chain