AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
The Stack Overflow Podcast
Trust as a service for validating OSS dependencies
Nov 14, 2023
Craig, co-founder and CEO of Stacklok, discusses trust and validation of OSS dependencies. They introduce Trusty and MINDER, two projects that enhance package security. AI is used to recommend alternative packages and promote security practices.
12:49
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- The traditional currency of CVEs is no longer effective, and the community needs to improve security practices and connect source of origin to artifact for better security posture.
- Stack Lock has developed Trusty and Minder to provide developers with unique insights, automate security processes, and ensure better security posture.
Deep dives
The Pain Point Six-Store Addressed
Six-Store was created to address the lack of easy signing and publishing of provenance information associated with a package. It aimed to provide a deterministic view of package production, including the source and context.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode