The Telemetry of Trust - Using Attestations to Secure Your Software Development Lifecycle with Open Source Tools

Learn how Autodesk approaches software delivery security at scale through a 38-minute conference talk that explores the power of attestations in securing diverse software development lifecycles. Discover how cryptographically verifiable telemetry bits can be combined to build trust metrics and enable delayed evaluation in software deployment decisions. Follow along as speakers demonstrate the implementation of open-source tools to create verifiable inputs, actions, and outcomes that form comprehensive software lifecycle stories, ultimately ensuring secure and compliant deployments across legacy systems and merged codebases. Gain insights into practical solutions for managing security challenges in complex software environments while maintaining scalability and effectiveness.