The reliance of development teams on open-source components is undeniable. It helps organizations get their software solutions to market sooner and free their engineers to focus on building intellectual property instead of “plumbing”.
Open-source projects are also an attack vector when bad actors compromise the open-source by injecting malware or developers unknowingly include releases with exploitable vulnerabilities.
Join Dave Roche, Director of Software Trust at DigiCert, as he shares the 5 best habits for securing your software supply chain from vulnerable or malicious open-source code. Gain valuable insights into:
• Novel software supply chain attacks
• Getting visibility of the components in your software
• Spotting and prioritizing vulnerabilities
• Taming code signing without hampering innovation