Supply Chain Security in the Enterprise (DockerCon 2023)

Given the success of open source software, even small systems have thousands of dependencies, and large enterprises track millions of components, each with unique licensing and the possibility of vulnerabilities. Fortunately, where there is an open source challenge, there is also an open source solution. Lockheed Martin is integrating open source solutions like the Sigstore product suite and TestifySec's Archivista to provide programmatic evidence for how their software is built, including the provenance of dependencies. Learn how open source solutions can help provide a more accountable and transparent supply chain.
Presentation: Supply Chain Security in the Enterprise
Speaker: Patrick Kwiatkowski, Software Engineer, Lockheed Martin
Resources:
Software supply chain, simplified - www.docker.com/products/docke...
Get started with Docker - www.docker.com/get-started/
What are containers? www.docker.com/resources/what...
Try Docker Desktop www.docker.com/products/docke...
Docker 101 Tutorial www.docker.com/101-tutorial/
Join the conversation!
LinkedIn → dockr.ly/LinkedIn
Twitter → dockr.ly/Twitter
Facebook → dockr.ly/Facebook
Instagram → dockr.ly/Instagram
ABOUT DOCKER: Docker provides a suite of development tools, services, trusted content, and automations, used individually or together, to accelerate the delivery of secure applications.
#devops #docker #softwaresupplychain

[@awnion]

Sounds good doesn't work...