World Congress 2022 • Jun 15, 2022

Securing your application software supply-chain

Are you blindly trusting your transitive dependencies? Learn how to systematically lock down your CI/CD pipeline with automated SBOMs and keyless signing before the next SolarWinds-style breach.

Starting at 5:30 · Watch from the beginning

Securing your application software supply-chain thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

1:39 min

Core domains of software supply chain security

Natale Vinto

Natale Vinto · World Congress 2024

2:46 min

Mapping the complete software supply chain attack surface

Matthew Brady

Matthew Brady · World Congress 2026 Europe

7:19 min

Designing a security-augmented software delivery process

Natale Vinto

Natale Vinto · World Congress 2024

1:37 min

Introduction to supply chain security principles

Zbyszek Tenerowicz · LIVE

3:36 min

Understanding software supply chain threats and security risks

Andrei Epure

Andrei Epure · World Congress 2024

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn

Thijs Feryn · World Congress 2026 North America

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail

What the heck do "declarative" and "reactive" actually mean?

André Kovac

The Design and Evolution of C++ thumbnail

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail

Get Ready for Jakarta EE 10!

Ivar Grimstad · Jakarta EE

Keep your code refactorable thumbnail

Keep your code refactorable

Gerrit Stapper

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

Architecting Secure and Encrypted Microservices in K8s

Arushi Garg

Adobe

SDE-2
MV Shiva

Google

SWE

Related videos

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Supply Chain Security and the Real World: Lessons From Incidents thumbnail

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat · Chainguard

World Congress · 2025

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

One Pipeline, Three Regulator - SBOM Compliance for the Developer thumbnail

One Pipeline, Three Regulator - SBOM Compliance for the Developer

Marcus Ross · Die Techniker

World Congress Europe · 2026

Securing Your Web Application Pipeline From Intruders thumbnail

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

LIVE · Oct 2020

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

AB

Andre Braun, GitLab

Now is the time for industrialized software development

Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace ...

over 1 year ago

A person developint HTML on a laptop with the sun shining on it.

DC

Daniel Cranney

Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.

Everyone thinks CISOs make the final call on security tools. But in modern software organisations, adoption starts long before the boardroom, inside CI/CD pipelines, developer workflows, and pull r...

9 months ago

A room full of people at a tech conference

DC

Daniel Cranney

Building an Agentic Software Factory

Could your software be fully automated? That was the question put to the main stage audience at WeAreDevelopers North America by Entire CEO Thomas Dohmke and Factory CEO Matan Grinberg. While most ...

9 days ago

A website's UI with labels around for different AI agents, like code quality, security, backend, marketing and so on.

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Solutions Engineer III, Corporate

AMSTERDAM, Netherlands

Remote DevOps Github Devsecops