Building Trust in Open Source: A Practical Guide to Securing Your ... - Yash Pimple скачать в хорошем качестве

Building Trust in Open Source: A Practical Guide to Securing Your ... - Yash Pimple

Building Trust in Open Source: A Practical Guide to Securing Your Software Supply Chain - Yash Pimple This talk was recorded at NDC Copenhagen in Copenhagen, Denmark. #ndccopenhagen #ndcconferences #developer #softwaredeveloper Attend the next NDC conference near you: https://ndcconferences.com https://ndccopenhagen.com/ Subscribe to our YouTube channel and learn every day: / ‪@NDC‬ Follow our Social Media!   / ndcconferences     / ndc_conferences     / ndc_conferences   #continuousdelivery #security As open-source software adoption accelerates, so do the threats targeting its supply chain. But what does it really mean to secure your software supply chain? And how do concepts like SLSA (Supply Chain Levels for Software Artifacts), SBOM (Software Bill of Materials), and tools like Sigstore fit into the picture? In this session, I’ll cut through the noise to demystify the fundamentals of software supply chain security. We’ll explore these frameworks and tools in depth, understand how they work together, and provide a clear practical guide to building stronger, more resilient pipelines. I’ll also highlight real-world supply chain threats from dependency confusion to insecure deployments and show how open-source tools can help you detect, prevent, and respond to these risks effectively. By the end of this session, attendees will have: A clear understanding of key security frameworks like SLSA, SBOM, and Sigstore Awareness of emerging threats in cloud-native software delivery Hands-on knowledge of tools and strategies to enhance trust in their development workflows Confidence to implement defense-in-depth strategies to secure their supply chain and deliver trusted verified software