World Congress 2024 • Aug 20, 2024 • Session details

Open Source Secure Software Supply Chain in action

Software supply chain attacks are escalating. Protect your development lifecycle using open-source tools like Sigstore and Tekton. Watch a live demonstration of shifting your pipeline security left.

Starting at 26:04 · Watch from the beginning

Open Source Secure Software Supply Chain in action thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:46 min

Mapping the complete software supply chain attack surface

Matthew Brady

Matthew Brady · World Congress 2026 Europe

3:36 min

Understanding software supply chain threats and security risks

Andrei Epure

Andrei Epure · World Congress 2024

1:37 min

Introduction to supply chain security principles

Zbyszek Tenerowicz · LIVE

4:00 min

Core principles for implementing DevSecOps in teams

Aarno Aukia · LIVE

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn

Thijs Feryn · World Congress 2026 North America

2:35 min

Integrating security across the application development lifecycle

Niels Tanis

Niels Tanis · World Congress 2022

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher +3

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre · Osedea

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim · Neo4j

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush · Dynatrace

Livecoding with AI thumbnail

Livecoding with AI

Rainer Stropek · software architects

Dapr in Practice thumbnail

Dapr in Practice

marcklefter · AxonIQ

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Agentic SDLC with Antigravity Harness

Tarun Pant

Google Cloud

Director, Customer Engineering

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Related videos

Securing your application software supply-chain thumbnail

Securing your application software supply-chain

Niels Tanis · Veracode

World Congress · 2022

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Supply Chain Security and the Real World: Lessons From Incidents thumbnail

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat · Chainguard

World Congress · 2025

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

Beyond SBOMs: The Future of Container Supply Chain Security thumbnail

Beyond SBOMs: The Future of Container Supply Chain Security

Mohammad-Ali A'râbi · JobRad

World Congress Europe · 2026

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

CH

Chris Heilmann

The Future of Open Source: A Deep Dive - Scott Chacon at WeAreDevelopers World Congress 2024

Scott gave us an exciting look into the future of open source in his talk at the WeAreDevelopers World Congress 2024! Discover how the community evolves, lessons from GitHub, and the challenges of ...

about 2 years ago

The Future of Open Source: A Deep Dive - Scott Chacon at WeAreDevelopers World Congress 2024

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java Spring

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture