Securing Your Software Supply Chain
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/securing-your-software-supply-chainsummary
Covers security risks from large numbers of transitive dependencies in JavaScript projects and rising attacks on the open-source supply chain, and discusses approaches to improve supply chain security such as accurate package manager dependency data, caching and bundling for reproducible installs, active scanning and profiling, information sharing, and tools like NPM Audit Signatures to verify package integrity; also mentions future work on reproducible installations and richer dependency queries.
AI-written summary · about
related talks
42mSecuring Your Software Supply Chain
41mManaging the Risk of Software Supply Chain Attacks
44mKeeping Your Software Supply Chain Healthy
51mOSS Supply Chain Threats and Why You Need a Holistic Security Strategy
49mMitigate Risks In Code: Protect Your Software based Supply Chain
37mSupply Chain Attacks and the Future of Software Delivery
15mSupply chain security for dummies
36mBuilding a Trusted and Resilient Software Supply Chain