InfoQ Homepage Software Supply Chain Content on InfoQ
Podcasts
RSS Feed
About this Podcast
Intended for architects and senior developers.
-
Implement the EU Cyber Resilience Act's Requirements to Strengthen Your Software Project
Eddie Knight, OSPO lead at Sonatype, discusses how the EU Cyber Resilience Act can help with improving your software project’s security and in the same time to slow down the alarming acceleration of software supply chain attacks.
/podcasts/cyber-act-strengthen-software-project/en/mediumimage/eddie-knight-interviewee-photo-1744701458529.jpg)
-
Generally AI Episode 4: Sold out!
In this episode of Generally AI, Meertens and Alford explore the theme of "sold out" and delve into the world of GPUs, hot sauce, and beer. The hosts cover CUDA-enabled GPUs and parallel programming patterns, then explore the parallels between the scarcity of GPUs and Sriracha hot sauce; the historical context of GPU shortages; and how beer and college students can model supply chain dynamics.
/podcasts/sold-out/en/mediumimage/generally-ai-m-1707897861540.jpg)
-
Tracy Miranda on Secure Supply Chains, SBOMs, and SLSA
In this episode, Tracy Miranda, a leader in the secure software supply chain domain, sat down with InfoQ podcast co-host Daniel Bryant and discussed the current state of the industry. Topics covered included the benefits of SBOMs and SLSA, getting started with generating SBOMs, and how developers should work with leadership when evaluating their organization’s security posture.
/podcasts/secure-supply-chains/en/mediumimage/tracy miranda-m-1694765385796.jpg)
-
Kim Lewandowski and Michael Lieberman on Securing the Software Supply Chain with SLSA
Charles Humble talks to Kim Lewandowski and Michael Lieberman about the SLSA framework. They discuss why the software supply chain is under growing attack, explore the key ideas in SLSA and its connection to Google’s Binary Authentication for Borg, and think about how the framework might evolve.
/podcasts/software-supply-chain-security/en/mediumimage/software-supply-chain-security-1654548294837.jpg)
About this Podcast
Discussions on intentional corporate culture and software management approaches.
-
Investing in Open Source: The Open Source Pledge and Why it Matters
In this podcast, Shane Hastie, Lead Editor for Culture & Methods, spoke to Chad Whitacre about the Open Source Pledge, an initiative to encourage companies to financially support open-source maintainers to ensure the sustainability and security of the software they depend on. The goal is to address the social contract within open source, where companies benefit from freely available software.
/podcasts/investing-open-source-pledge/en/mediumimage/chad-whicacre-interviewee-1741008923321.jpg)
-
Vulnerabilities and Risks in the Software Supply Chain
Shane Hastie spoke to Brian Fox of Sonatype about vulnerabilities and risks inherent in the modern software supply chain and how to overcome them.
/podcasts/software-suply-chain-vulnerabilities-risks/en/mediumimage/brian-fox-1650612108393.jpg)