InfoQ Homepage Software Supply Chain Content on InfoQ
Presentations
RSS Feed-
Zero Trust Agent Systems that Pass Audits and Still Ship
Advait Patel explains how to secure AI agents in production by moving security boundaries to the tool layer, enforcing workload identity, and capturing structured audit traces for compliance.
-
Comprehensive Approaches to Software Supply Chain Security
Mykhailo Brodskyi discusses critical software supply chain security risk categories relevant to FinTech and explains effective mitigation strategies. Real case studies & demo included.
-
Securing the Software Supply Chain: How in-toto and TUF Work Together to Combat Supply Chain Attacks
Marina Moore covers the fundamentals of both in-toto and TUF, and discusses how to combine them with a real world case study where Datadog has been using two technologies together.
-
Panel: Secure Systems
The panelists discuss the security for the software supply chain and software security risk measurement.
-
Securing the Development & Supply Chain of Open Source Software (OSS)
David Wheeler discusses how OSS is developed & distributed as a supply chain (SC) model, how OSS developers can develop & distribute secure OSS today, and how potential users can select secure OSS.
-
Resilience in Supply Chain Security
Dan Lorenc goes over real-world threats facing open source supply-chains today, and what can be done to architect resilient build and delivery pipelines.