DEV Community

DevSec For Startups

Improving Software Supply Chain Trust w/ Barak Brudo, Scribe Security

What is code integrity and how does it affect the software supply chain? Have you heard about Log4j?

In this episode, I talk with Barak Brudo, Developer Relations Advocast at Scribe Security about the Software Bill of Materials (SBOM) that helps to ensure all your code and packages are secure, down to the file level. By utilizing automated SBOMs, both companies and users can better understand what packages are being used, what dependencies, what file versions, and more are in your software.

All this makes dealing with supply chain problems much easier by ensuring the integrity of all the packages and files being utilized.

Episode source