Control. Shift. Deliver. Take Command of your Software Supply Chain
summary
Panel describes a concrete stack: SonarQube runs code quality and security gates, models benchmark at roughly three out of four correctness cases, and teams push artifacts and model binaries into Artifactory as model registry. Nvidia supplies NeMo models packaged into a NIMs secure runtime that builds optimized binary kernels for 2–3x token efficiency; those containers have ~400 dependencies and require VEX/SBo reports. ServiceNow adds an AI Control Tower and workflow record linkage for traceability and faster, compliant incident-to-release cycles.
AI-written summary · about
chapters (6)
- 0:00Introduction and welcome
- 1:04Sonar and code quality
- 5:16ServiceNow partnership vision
- 12:00Nvidia’s AI and hybrid models
- 20:04AI’s impact on developers
- 26:06Closing and call to action
related talks
06mIgnite - Managing Your Software Supply Chain
23mMastering Secure Software Supply Chains
36mSecuring the software supply chain
36mSecure your software supply chain from dependencies to deployment
33mAI in the Security Stack
15mPolicy control for Software Supply Chain
22mGuardians of Code: Continuously Monitoring Security and DevOps Compliance
32mSoftware Supply Chain Security