Building Trust in Open Source - A Practical Guide to Securing Your Software Supply Chain

Learn to secure your software supply chain through this comprehensive conference talk that demystifies key security frameworks and provides practical implementation strategies. Explore the fundamentals of software supply chain security, including SLSA (Supply Chain Levels for Software Artifacts), SBOM (Software Bill of Materials), and Sigstore tools, understanding how these frameworks work together to create more resilient development pipelines. Discover real-world supply chain threats ranging from dependency confusion to insecure deployments, and examine how open-source tools can help detect, prevent, and respond to these risks effectively. Gain hands-on knowledge of tools and strategies to enhance trust in development workflows, develop awareness of emerging threats in cloud-native software delivery, and build confidence to implement defense-in-depth strategies that secure your supply chain while delivering trusted, verified software.