Panel: Platform Engineering to the Rescue - A Practica...
summary
Practical checklist: generate and attest SBOMs (don’t ship them unsigned), run a 1-hour supply-chain game day to map contacts and playbooks, inventory and check GitHub Actions workflows and other CI/CD pieces, choose suppliers with quick patch SLAs, minimize attack surface and rebuild images automatically, push base-image fixes with automated tooling (e.g., BIMP-style), use AI security tooling for fast triage and remediation, and designate platform-facing security reps on each product team to coordinate rapid zero-day response.
AI-written summary · about
chapters (7)
- 0:00Welcome
- 2:32Favorite CVEs
- 6:45SBOM challenges
- 11:16Supply chain attacks
- 15:54Zero-day scenarios
- 22:14Security engineering role
- 29:02Key takeaway
related talks
36mPanel: It’s Not If, It’s When - Practical Preparation for the Next Software Supply Chain Attack
27mSecurity: The Thing That Everyone...
36mSecuring the software supply chain
26mPlatform Engineering Loves Security: Shift Down To Your Platform, Not Left To Your Developers! - Maxime Coquerel, Royal Bank of Canada
45mBuilding Secure Software: Practical Strategies for Developers
29mSecuring the platform: Hard-won lessons from the teams who've been breached, scaled, and survived
45mPanel: Modernizing Security Architecture: Platforms or Best-of-Breed, What Works?
12mDevSecOps Playbook for AI-Era CI/CD Pipelines