Supply Chain Security & the Real World: Lessons From Incidents
summary
Examines real-world software supply chain compromises (including the Codecov breach and a changed-files attack) and converts those incidents into concrete mitigations for build systems and CI/CD pipelines. Focuses on practical changes—CI/CD settings and build process adjustments—to prevent or limit impact from compromised dependencies and pipeline components, with emphasis on container-related tooling and supply-chain artifacts like SBOMs.
AI-written summary · about
related talks
15mSupply chain security for dummies
37mSupply Chain Attacks and the Future of Software Delivery
39mSoftware Supply Chain Security
35mSupply Chain Attacks: The New Reality
15mSoftware Supply Chain Security for those in a rush
29mSupply Chain Security: Threats, Defenses And What You Can Do
36mBuilding a Trusted and Resilient Software Supply Chain
49mMitigate Risks In Code: Protect Your Software based Supply Chain