Secure Software Summit: The State of OSS Supply Chain Security

By Dan Lorenc, Chainguard

This article is part of a series showcasing learnings from the Secure Software Summit

The Open Source Software (OSS) Supply Chain is under attack. As evidenced by the recent Log4Shell vulnerability, the OSS supply chain is increasingly a focus for attackers seeking to exploit weak links in security. A number of research reports have recorded a significant increase in so-called “next-gen software supply chain attacks” over the past …

application development cybersecurity devops hacking oss security software software development state supply supply chain supply chain security