DevOps Paradox DOP 111: What Are Software Supply Chain Attacks?
Jun 16, 2021
Security researcher Alex Birsan discusses software supply chain attacks, focusing on his Dependency Confusion article. Topics include managing supply chain security in Tekton, verifiable builds for code integrity, and balancing security with efficiency in company systems.
Chapters
Transcript
Episode notes
1 2 3 4 5
Intro
00:00 • 3min
Managing Private and Public Registries in Software Supply Chain Attacks
02:56 • 13min
Importance of Verifiable Builds in Auditing for Code Integrity
16:20 • 5min
Finding the Balance Between Security and Efficiency in Company Systems
21:09 • 2min
Exploring Software Supply Chain Attacks and Trust in the Supply Chain Process
23:20 • 4min