Modernizing the Management of Your Software Supply Chain - Tom Gibson - ASW #169

<p>SBOM: What does it really tell you and the importance of having one for your organization.</p> <p>- Finding and fixing known vulnerabilities in dependencies and container images</p> <p>- Building a source of truth for packages to avoid malicious packages getting through</p> <p>- Combining continuous packaging and security into a CI/CD pipeline</p> <p>- Establishing Trust & Provenance in your Software Supply Chain</p> <p>- Visibility in your Software Supply Chain with upstreams and signatures</p> <p> </p> <p>This segment is sponsored by Cloudsmith. Visit <a href= "https://securityweekly.com/cloudsmith">https://securityweekly.com/cloudsmith</a> to learn more about them!</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/asw">https://www.securityweekly.com/asw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/asw169">https://securityweekly.com/asw169</a></p>