InfoQ Homepage Software Supply Chain Content on InfoQ
About this Podcast
Intended for architects and senior developers.
-
How SBOMs and Engineering Discipline Can Help You Avoid Trivy’s Compromise
Viktor Peterson, part of the CISA task force working on SBOM blueprints and co-founder of sbomify, explores the shifting landscape of software supply chain security as the EU's Cyber Resilience Act (CRA) comes into force, a "GDPR moment" for the industry.
/podcasts/help-avoid-trivy-compromise/en/mediumimage/viktor-petersson-interviewee-1775549272964.jpeg)
-
Andres Almiray on How to Release Any Software to Any OS with JReleaser
Andres Almiray, a serial open-source contributor and the creator of JReleaser, discusses the project's state, noting that the tool is usable across any ecosystem, not just Java. He also touches on the Common House Foundation's mission.
/podcasts/release-software-jreleaser/en/mediumimage/andres-interviewee-1773312603825.jpg)
-
The Hidden Vulnerability of the Open Source Software Supply Chain: the Underlying Infrastructure
Software supply chain veteran Brian Fox unpacks the security implications of the new EU Cyber Resilience Act and its profound impact on open-source projects. He reveals the hidden infrastructure risks threatening open-source projects and shares insights for senior software leaders navigating this regulatory landscape.
/podcasts/open-source-software-supply-chain/en/mediumimage/brian-fox-interviewee-picture-1758721714264.jpg)
-
Implement the EU Cyber Resilience Act's Requirements to Strengthen Your Software Project
Eddie Knight, OSPO lead at Sonatype, discusses how the EU Cyber Resilience Act can help with improving your software project’s security and in the same time to slow down the alarming acceleration of software supply chain attacks.
/podcasts/cyber-act-strengthen-software-project/en/mediumimage/eddie-knight-interviewee-photo-1744701458529.jpg)
-
Generally AI Episode 4: Sold out!
In this episode of Generally AI, Meertens and Alford explore the theme of "sold out" and delve into the world of GPUs, hot sauce, and beer. The hosts cover CUDA-enabled GPUs and parallel programming patterns, then explore the parallels between the scarcity of GPUs and Sriracha hot sauce; the historical context of GPU shortages; and how beer and college students can model supply chain dynamics.
/podcasts/sold-out/en/mediumimage/generally-ai-m-1707897861540.jpg)
About this Podcast
Discussions on intentional corporate culture and software management approaches.
-
Investing in Open Source: The Open Source Pledge and Why it Matters
In this podcast, Shane Hastie, Lead Editor for Culture & Methods, spoke to Chad Whitacre about the Open Source Pledge, an initiative to encourage companies to financially support open-source maintainers to ensure the sustainability and security of the software they depend on. The goal is to address the social contract within open source, where companies benefit from freely available software.
/podcasts/investing-open-source-pledge/en/mediumimage/chad-whicacre-interviewee-1741008923321.jpg)
-
Vulnerabilities and Risks in the Software Supply Chain
Shane Hastie spoke to Brian Fox of Sonatype about vulnerabilities and risks inherent in the modern software supply chain and how to overcome them.
/podcasts/software-suply-chain-vulnerabilities-risks/en/mediumimage/brian-fox-1650612108393.jpg)