Stay updated with software security insights from industry leaders. Join our panel featuring experts from Puppet and Shopify's advanced DevOps teams, addressing your major queries in an evolving landscape of news, regulations, and tools.

Ciara Carey

Sales Engineer

Nigel Kersten

Jacques Chester

There is so much information out there about software security. Every day, there seems to be a new news headline, government regulation, or tool promising to “fix it all”. Do you ever wish you could just peek into how some of the industry’s best dev teams are managing this?
We’ve assembled a panel of experts from the mature DevOps teams of Puppet and Shopify to answer some of your biggest questions

How do mature DevOps teams manage software security?

Software supply chain security

Best practices

An overview of EU cybersecurity regulations and why they're relevant to org using open source software

OSS is incredibly positive - without projects like Docker, Kubernetes, Debian, NGINX, Apache, or others, technological innovation would be painfully slow. Its innovation, ease of use, and zero cost meant that nearly every piece of software contains OSS. OSS is everywhere, including data centres, hospitals, e-commerce, phone networks, mobile devices, and power stations. Last year, the Whitehouse issued an Executive Order after the fallout of SolarWinds. This kickstarted the use of SBOMs, a flurry of new projects to protect the supply chain, and the rise of OpenSSF. - How has the EU responded to Critical Threats in OSS? - Are the threats to the EU different from the USA? - The EU is not 1 country but is made up of 27 countries- how does this affect change? - Let’s look at Ireland as an example country in EU and how it is affected by threats to the OSS supply chain and how the EU helps.

The EU's Efforts to Secure Open Source Software

Security

Open Source

Regulations

Rising software supply chain attacks shape a new norm for developers and security pros. Growing observability helps preempt disruptions. Cloudsmith and invited experts discuss its impact on supply chain security.

Tom Gibson

Claire Burn

Josh Bressers

Frequent software supply chain attacks are becoming the new normal for developers and security professionals everywhere. Even though it’s still relatively new, observability has continued to gain momentum as a way to identify software supply chain issues before they become a major disruption. Having access to the right data at the right time is necessary to make decisions about priorities.
We’ve assembled a panel of experts from software, security, and data to talk about observability and what it means to your software supply chain security.

Secure Your Software Supply Chain Using Observability

Observability

Learn about Software Bill of Materials, their benefits, and how to generate them

Software supply chain attacks using software vulnerabilities remain a key avenue of initial access for attackers.
Organizations had to scramble to find out if critical vulnerabilities like Log4J were running on their systems. In response, Software Bill of Materials or SBOMs are being quickly adopted by enterprises around the globe, so what are they all about? The Linux Foundation research team revealed that 78% of organizations expect to produce or consume the Software Bill of Materials (SBOMs) in 2022.
Watch this session from DevOps Con NYC to learn about this emerging standard, how it can improve the security of your supply chain, open source tools to help you generate and analyze SBOMs and the future of SBOMs.

SBOMs: The New Standard in Supply Chain Security

SBOM

Software Supply Chain

Join the team at Cloudsmith and Luke Hinds (RedHat/Stacklock) to learn essential tips for starting with software supply chain security 

Adil Leghari

Lee Skillen

Chief Technology Officer

Dan McKinney

Luke Hinds

Join the team at Cloudsmith and Luke Hinds (RedHat/Stacklock) to learn essential tips for starting with software supply chain security

Where to start with software supply chain security?

Software supply chain

security

Learn how to improve your supply chain security workflow, enhance visibility

Alison Sickelka

VP of Product

David Schmitt

Engineer

Chris Phillips

Software Engineer

Attend this webinar to learn how to improve your supply chain security workflow, enhance visibility, and prevent a disaster like Log4J by using Syft, Grype, Cosign, and Cloudsmith as the container registry.

Making SBOMs Actionable

Software Supply Chain 

Join Dan McKinney, Developer Relations at Cloudsmith for an introduction to Continuous Packaging, and to discuss what it takes to secure build and deployment pipelines

With the increased focus on software supply chain security, the question arises- what implications does that have for CI/CD processes and DevOps pipelines? Join Dan McKinney, Developer Relations at Cloudsmith for an introduction to Continuous Packaging, and to discuss what it takes to secure build and deployment pipelines.

The Future is Continuous Integration, Packaging and Delivery

CI/CD

Workflows

Efficiency

In this session gather SLSA experts from across the industry to discuss the practical uses of the new 1.0 framework.

Join us for an exploration of cloud-native developer infrastructure, and its benefits when compared with a legacy, self-hosted or on-premises approaches

The Future is Cloud-Native

Infrastructure

Developer Experience

Join Chainguard's Dan Lorenc, Cloudsmith's Paddy Carey, Adil Leghari, and Dan McKinney in a fireside chat exploring the history, development, and deployment of supply chain security.

From the history of supply chain security threats to security development and deployment we’ve covered everything you’ve always wanted to know about the software supply chain but were afraid to ask. Dan Lorenc, Founder/CEO, Chainguard, Paddy Carey, Senior Staff Engineer, Cloudsmith, Adil Leghari, Solutions Architect Manager, Cloudsmith and Dan McKinney, Developer Relations, Cloudsmith, gathered for a fireside chat to cover your most burning questions

Webinar Archive