On-Demand Session Details:
The recent executive order requiring SBOMs (Software Bill of Materials) of those supplying software to the federal government has been instrumental in advancing the conversation around software supply chain security – but SBOMs are just the tip of the iceberg, and quite possibly, not even the most interesting or promising part.
During this recorded session, Cisco distinguished engineer Ed Warnicke and Cisco technical marketing engineer Michael Chenetz discussed:
- Software supply chain mistakes of the mid-2000s that are being replicated in a cloud-native world
- he difficulty of establishing a single source of truth for a software supply chain
- The (bright!) future for software supply chain security, including promising advances from projects such as in-toto and OmniBOR
