WeAreDevelopers LIVE • Apr 29, 2022

Walking into the era of Supply Chain Risks

Vandana Verma

With 90% of your codebase built on open-source, who truly controls your software? Uncover how to defend your development pipeline against devastating supply chain attacks using zero-trust architecture.

Starting at 12:50 · Watch from the beginning

Walking into the era of Supply Chain Risks thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

3:36 min

Understanding software supply chain threats and security risks

Andrei Epure

Andrei Epure · World Congress 2024

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn

Thijs Feryn · World Congress 2026 North America

2:46 min

Mapping the complete software supply chain attack surface

Matthew Brady

Matthew Brady · World Congress 2026 Europe

3:39 min

Exploring the mechanics of software supply chain attacks

Chris Heilmann

Chris Heilmann +2 · LIVE

2:00 min

Mitigating risks from supply chain attacks and vulnerable libraries

Jasmin Azemović

Jasmin Azemović · World Congress 2023

3:09 min

Practical mitigation strategies for modern software supply chains

Adrian Mouat

Adrian Mouat · World Congress 2026 Europe

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

AI at the Door, Turning ‘Tech Debt Panic’ into ‘Tech Debt Repairs’

Prerit Munjal

Groupon

Senior Technical Product Manager

Beyond vibe coding: Mastering the AI-native SDLC from code to production

Amith Singhee

IBM

Director, IBM Research India and AI for Z, SIL; CTO, IBM India / South Asia

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Securing your application software supply-chain thumbnail

Securing your application software supply-chain

Niels Tanis · Veracode

World Congress · 2022

Supply Chain Security and the Real World: Lessons From Incidents thumbnail

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat · Chainguard

World Congress · 2025

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World thumbnail

Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World

Adrian Mouat · Chainguard

World Congress Europe · 2026

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

From learning to earning

Jobs that call for the skills explored in this talk.

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java Spring

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java

about 1 month ago

Security Risk & Engineering- Cloud Security

Boston, MA, United States

Expert $99k–232k Multiplatform Data Security Cyber Security