Keynote: A Secure Supply Chain Vision
summary
Vision emphasizes rising supply chain attacks that increasingly exploit open source, drawing attention from CEOs to the U.S. President and demanding concrete fixes. It names projects and orgs working on solutions: OSF? Wait transcript spelled OSSF earlier—uploader trusts description names so use open ssf and CNCF secure supply chain TAG and promotes SIG-Security practices. It cites a live HackerOne bug bounty program, on-call security rotations, and the goal to protect code, artifacts, machines and identity from commits to production, arguing these measures are practical and collaborative.
AI-written summary · about
chapters (5)
related talks
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
12mKeynote: A Vision for a Secure Software Supply Chain
22mKeynote: Securing the Open Source Ecosystem
15mKeynote: Government's Continuing Path Contributing Towards a Secure Open Source Ecosystem
08mKeynote: Security of the Open Source Supply Chain, a Call to Action
11mKeynote: Securing Open Source
19mKeynote: Supply Chain Security in 2024
16mKeynote: There Is Just One Way to Do Open Source Security: Together