The Whole Is Greater Than the Sum of Its Parts - A Case for Interoperable Supply Chain Tooling

Explore the critical importance of interoperable supply chain security tooling in this 23-minute conference talk from OpenSSF. Learn how foundational projects like in-toto, DSSE, Sigstore, SLSA, Minder, and GUAC can work together more effectively despite current interoperability challenges. Discover the gaps that exist when organizations use different tooling across their supply chains, from upstream suppliers to downstream users, and examine how even consolidated tools like Sigstore with in-toto still face compatibility issues in storing signature information and encoding data. Gain insights into example approaches for bridging these gaps and understand the remaining work needed to achieve seamless tooling interoperability. Develop a comprehensive understanding of how to combine these technologies strategically to strengthen your organization's supply chain security posture.