> Markdown version of [/videos/1038-open-source-secure-software-supply-chain-in-action?t=1564](https://www.wearedevelopers.com/videos/1038-open-source-secure-software-supply-chain-in-action?t=1564). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Open Source Secure Software Supply Chain in action

Software supply chain attacks are escalating. Protect your development lifecycle using open-source tools like Sigstore and Tekton. Watch a live demonstration of shifting your pipeline security left.

- **Speakers:** [Natale Vinto](https://www.wearedevelopers.com/@natale-vinto)
- **Event:** World Congress 2024
- **Published:** August 20, 2024
- **Duration:** 32:55
- **URL:** https://www.wearedevelopers.com/videos/1038-open-source-secure-software-supply-chain-in-action
- **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/d5f55c853dae9d5b4d88d180a984111e/thumbnails/thumbnail.jpg?time=30000ms

## Access

Playback and chapters for this video are available with a Free account.

## Related Moments

- [Mapping the complete software supply chain attack surface](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) (from "Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/ce760d1f58c375b2cda83931e73cb215/thumbnails/thumbnail.jpg?time=141270ms
- [Understanding software supply chain threats and security risks](https://www.wearedevelopers.com/videos/938-how-your-net-software-supply-chain-is-open-to-attack-and-how-to-fix-it) (from "How your .NET software supply chain is open to attack : and how to fix it")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/0ddcc893933c883a6266c2b7eafd6001/thumbnails/thumbnail.jpg?time=221055ms
- [Introduction to supply chain security principles](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans) (from "Oops! Stories of supply chain shenanigans")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/170bb8e4e3bd4a565eeb1db4e62f1231/thumbnails/thumbnail.jpg?time=99345ms
- [Core principles for implementing DevSecOps in teams](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) (from "DevSecOps: Security in DevOps")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/2c5804898615d7e0f59d07154b9692cf/thumbnails/thumbnail.jpg?time=56865ms
- [Addressing vulnerabilities in software supply chains](https://www.wearedevelopers.com/videos/100450-speed-up-your-ci-cd-pipelines-by-caching-build-runtime-artifacts) (from "Speed up your CI/CD pipelines by caching build & runtime artifacts")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/fb6b235aa869b8b3f929c23591fefd1a/thumbnails/thumbnail.jpg?time=107221ms
- [Integrating security across the application development lifecycle](https://www.wearedevelopers.com/videos/468-securing-your-application-software-supply-chain) (from "Securing your application software supply-chain")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/cad82c8e5ef1cef7c00dc1c876a143f3/thumbnails/thumbnail.jpg?time=244300ms

## Related Articles

- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Future of Open Source: A Deep Dive - Scott Chacon at WeAreDevelopers World Congress 2024](https://www.wearedevelopers.com/magazine/471-the-future-of-open-source-a-deep-dive-scott-chacon-at-wearedevelopers-world-congress-2024)

## Related Jobs

- [Product Security Incident Response Analyst](https://www.wearedevelopers.com/jobs/ext/4158569-product-security-incident-response-analyst) at **GitHub**
- [Staff Developer Advocate, GitHub Security Lab](https://www.wearedevelopers.com/jobs/ext/3929243-staff-developer-advocate-github-security-lab) at **GitHub**
- [Staff Security Data Engineer](https://www.wearedevelopers.com/jobs/ext/4469379-staff-security-data-engineer) at **GitHub**
- [Software Development Engineer 1](https://www.wearedevelopers.com/jobs/48592-software-development-engineer-1) at **WEX**
- [Software Development Engineer 1](https://www.wearedevelopers.com/jobs/48593-software-development-engineer-1) at **WEX**
- [Senior Product Security Architect](https://www.wearedevelopers.com/jobs/48532-senior-product-security-architect) at **Expedia**