DEV Community

DevSec For Startups

Software Supply Chain Security w/ Anton Weiss, Otomato Software

How do companies secure themselves against supply chain attacks as well as internal pipelines?

In this episode, Ant Weiss, self-described Software Delivery Futurist and Founder of Otomato Software, a DevOps consultancy, talks to us about what he believes is the biggest supply chain threat when it comes to shipping code.

He also gives us some of his personal experiences with the internal workings of DevOps pipeline security from a supply chain perspective, and we get into dealing with open source packages as well.

Episode source