Topic mix
Software supply chain security
18 moments from 14 videos · 56:53 min total
Securing software pipelines is critical to modern development. This playlist brings together essential moments from expert talks on managing open-source dependencies and verifying third-party packages.
Play section Core domains of software supply chain security
Core domains of software supply chain security
The critical role of software composition, content signing, and policy enforcement in securing applications.
Core domains of software supply chain security
The critical role of software composition, content signing, and policy enforcement in securing applications.
Play section Essential supply chain security terminology and standards
Essential supply chain security terminology and standards
A review of critical acronyms and the SALSA framework levels for defining platform security.
Essential supply chain security terminology and standards
A review of critical acronyms and the SALSA framework levels for defining platform security.
Play section Designing a security-augmented software delivery process
Designing a security-augmented software delivery process
Implementing a shift-left approach with opinionated pipelines and keyless signing workflows.
Designing a security-augmented software delivery process
Implementing a shift-left approach with opinionated pipelines and keyless signing workflows.
Play section Understanding software supply chain threats and security risks
Understanding software supply chain threats and security risks
The software supply chain encompasses all build tools and dependencies, which are increasingly targeted by data exfiltration attacks.
Understanding software supply chain threats and security risks
The software supply chain encompasses all build tools and dependencies, which are increasingly targeted by data exfiltration attacks.
Play section A four-layer governance model for securing automated software supply chains
A four-layer governance model for securing automated software supply chains
A structural governance framework ensures agent-driven changes verify composition, establish secure baselines, enforce policies, and maintain boundaries.
A four-layer governance model for securing automated software supply chains
A structural governance framework ensures agent-driven changes verify composition, establish secure baselines, enforce policies, and maintain boundaries.
Play section Verifying container composition and origins using software bill of materials
Verifying container composition and origins using software bill of materials
Supply chain security demands transparency through software bills of materials, vulnerability exploitability data, and provenance records.
Verifying container composition and origins using software bill of materials
Supply chain security demands transparency through software bills of materials, vulnerability exploitability data, and provenance records.
Loading the rest of your playlist…
Your mix. Instantly.
More mixes
AI & Machine Learning
AI coding agents
AI & Machine Learning
MCP (Model Context Protocol)
AI & Machine Learning
RAG
Languages & Frameworks
TypeScript
Languages & Frameworks
React
Languages & Frameworks
Java
Cloud, Platform & Data
Platform engineering
Cloud, Platform & Data
Observability
Cloud, Platform & Data
Infrastructure as code
Architecture, Quality & Security
System architecture
Architecture, Quality & Security
Code review
Architecture, Quality & Security
Software supply chain security
Leadership, Career & Community
Engineering strategy
Leadership, Career & Community
Developer experience
Leadership, Career & Community