The Secure Software Supply Chain
summary
Covers tools and techniques for securing the software supply chain, demonstrated with live demos of how to apply them in real-world projects. Focus is on practical measures to secure software produced by assembling libraries and frameworks, showing tool-based approaches rather than theoretical models.
AI-written summary · about
chapters (12)
- 0:00The insecure developer
- 5:11Introduction to supply chain
- 6:13Understanding Salsa framework
- 9:38Securing the small project
- 12:01Achieving Salsa level one
- 17:07Implementing build provenance
- 20:43The no-code paradox
- 25:16Moving to Salsa level three
- 29:43Automating signed releases
- 32:32Finalizing level three badge
- 34:35Continuous vulnerability scans
- 36:21Q&A and future of security
related talks
51mIs a Secure Software Supply Chain Even Possible, Let Alone Feasible?
29mSupply Chain Security in the Software Era
33mWhat is the secure software supply chain
39mSoftware Supply Chain Security
25mLet’s Talk Software Supply Chains with TAG Security
38mSupply Chain Security & the Real World: Lessons From Incidents
32mSoftware Supply Chain Security
18mExploring a Risk Approach to Software Supply Chain Security