Our dependency on Open Source is scary. SLSA, SBOM and Sigstore to the rescue - Abdel Sghiouar

This talk addresses the critical topic of software supply chain security, exploring the significance of understanding dependencies in open-source software. The speaker clarifies concepts such as SLSA, SBOM, and the importance of ensuring that software is free from backdoors and vulnerabilities. He presents a comprehensive overview of current security practices and methodologies that organizations are adopting to secure their software from development to production. Abdel Sghiouar, a senior Cloud Developer Advocate at Google Cloud and co-host of the Kubernetes Podcast, brings valuable insights from his expertise in GKE, Kubernetes, Service Mesh, and Serverless technologies.