Reflections on Trust in the Software Supply Chain

Reflections on Trust in the Software Supply Chain from OWASP 2023 Global AppSec DC

This talk delves into the current state of software supply chain security and the challenges organizations face in ensuring the security and trustworthiness of their software.

The current efforts to secure the software supply chain, including Supply-chain Levels for Software Artifacts (SLSA), Software Bill of Materials (SBOM), code signing, and the security of the build tool chain, will be critically evaluated. While many of these efforts …

appsec challenges current global organizations owasp security software software supply chain software supply chain security state supply supply chain supply chain security trust trustworthiness