WeAreDevelopers LIVE • Apr 29, 2022

Walking into the era of Supply Chain Risks

Vandana Verma

With 90% of your codebase built on open-source, who truly controls your software? Uncover how to defend your development pipeline against devastating supply chain attacks using zero-trust architecture.

Starting at 10:40 · Watch from the beginning

Walking into the era of Supply Chain Risks thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

3:36 min

Understanding software supply chain threats and security risks

Andrei Epure

Andrei Epure · World Congress 2024

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn

Thijs Feryn · World Congress 2026 North America

2:46 min

Mapping the complete software supply chain attack surface

Matthew Brady

Matthew Brady · World Congress 2026 Europe

3:39 min

Exploring the mechanics of software supply chain attacks

Christian Trummer

Christian Trummer +2 · LIVE

2:00 min

Mitigating risks from supply chain attacks and vulnerable libraries

Jasmin Azemović

Jasmin Azemović · World Congress 2023

3:09 min

Practical mitigation strategies for modern software supply chains

Adrian Mouat

Adrian Mouat · World Congress 2026 Europe

More from WeAreDevelopers LIVE

Why Your Side Projects Are Worth Sharing thumbnail

Why Your Side Projects Are Worth Sharing

Haimantika Mitra +2

Yesterday

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Pritesh Kiri +2

Last week

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

2 weeks ago

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

3 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Luise Freese +2

4 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Roxy Rodriguez-Becker +1

Oct 2026

Upcoming sessions on this topic

Starts in 12 days

Conference India 2026

November 25–26, 2026

Bengaluru, India

Get tickets All 107 sessions

Supply Chain Security for the Everyday Engineer
Pradumna Saraf · Kestra Technologies

Wed 25 Nov · Stage 3 - powered by GitHub
Beware of Strangers Bearing Code: Open Source Trust in the Agent Era
Vikram Vaswani

Wed 25 Nov · Stage 3 - powered by GitHub
AI at the Door, Turning ‘Tech Debt Panic’ into ‘Tech Debt Repairs’
Prerit Munjal · Groupon

Thu 26 Nov · Mainstage

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Securing your application software supply-chain thumbnail

Securing your application software supply-chain

Niels Tanis · Veracode

World Congress · 2022

Supply Chain Security and the Real World: Lessons From Incidents thumbnail

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat · Chainguard

World Congress · 2025

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World thumbnail

Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World

Adrian Mouat · Chainguard

World Congress Europe · 2026

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

From learning to earning

Jobs that call for the skills explored in this talk.

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

10 days ago •

Software Development Engineer 1

Bengaluru, India

Starter Hybrid · 3 days on-site Java Spring

10 days ago •

Software Development Engineer 1

Bengaluru, India

Starter Hybrid · 3 days on-site Java

about 2 months ago •

Senior Product Security Architect

Austin, United States

Expert Hybrid · 3 days on-site Agentic AI Security Architecture