Supply Chain Security Security with Containers and CI/CD Systems - Kirsten Newcomer - #ASW 256

<p>Supply chain has been a hot topic for a few years now, but so many things we need to do for a secure supply chain aren't new at all. We'll cover SBOMs, vuln management, and putting together a secure pipeline.</p> <p>Segment resources:</p> <ul> <li><a href= "https://www.solarwinds.com/assets/solarwinds/swresources/whitepaper/2111_swi_whitepaper_nextgenbuild.pdf" target="_blank" rel= "noopener">https://www.solarwinds.com/assets/solarwinds/swresources/whitepaper/2111<em>swi</em>whitepaper_nextgenbuild.pdf</a></li> <li><a href="https://next.redhat.com/project/tekton-chains/" target="_blank" rel= "noopener">https://next.redhat.com/project/tekton-chains/</a></li> <li><a href="https://tekton.dev/" target="_blank" rel= "noopener">https://tekton.dev/</a></li> </ul> <p>In the news, a stroll back through the Apache Struts breach of Equifax, CISA's list of Known Exploited Vulnerabilities, Rust's replacement for OpenSSL, Go no longer throws programmers for a loop, complexity vs. design (that leads to better security), and more!</p> <p>Visit <a href="https://securityweekly.com/asw" target="_blank" rel="noopener">https://securityweekly.com/asw</a> for all the latest episodes!</p> <p>Follow us on Twitter: <a href= "https://www.twitter.com/secweekly" target="_blank" rel= "noopener">https://www.twitter.com/secweekly</a></p> <p>Like us on Facebook: <a href= "https://www.facebook.com/secweekly" target="_blank" rel= "noopener">https://www.facebook.com/secweekly</a></p> <p>Show Notes: <a href="https://securityweekly.com/asw-256" target= "_blank" rel="noopener">https://securityweekly.com/asw-256</a></p>