This online training will explore why software supply chain security has become a top concern as open-source software now powers the vast majority of modern applications. Drawing on real-world incidents like Log4Shell, malicious code injected into the Linux Kernel and phishing campaigns targeting PyPI, the session will examine how these threats emerge and why agencies are seeing increased government guidance and oversight.
Attendees will learn how to:
-
Identify the core properties of secure open-source software
-
Detect and deter bad actors early in the development lifecycle
-
Reduce the risk of malicious code entering the software supply chain
Join this hands-on session to gain practical principles that can help you build trust in open-source software, strengthen your supply chain and deploy applications with greater confidence.