Explore the comprehensive landscape of software supply chain security in this 40-minute conference talk by Jeffrey Sica from the Cloud Native Computing Foundation. Delve into the myriad tools and standards being developed and discussed in the industry, moving beyond individual deep dives to examine how these solutions interconnect. Gain an engineer's perspective on securing software from scratch, addressing common questions about the complete picture of supply chain tooling. Engage in a collaborative discussion that aims to demystify the complexities of modern software security practices and understand how various components work together to create a robust security framework.