Podcast: Play in new window | Download (Duration: 43:58 — 100.8MB)
Subscribe: Apple Podcasts | Google Podcasts | Spotify | RSS
When you write software, there’s no reason to reinvent the wheel – shared libraries and other resources exist to enable you to create applications while avoiding redundant work. Unfortunately, sometimes the software supply itself chain is attacked, which would mean that your application contain malware or security threats you didn’t account for. In this episode of Enterprise Linux Security, Joao and I discuss supply chain attacks, as well as some ways to mitigate this threat.
Supply chain Levels for Software Artifacts (SLSA)