Software supply chain security is broader than SolarWinds and Log4J

Dan Lorenc
Contributor




Share on Twitter





Dan Lorenc is CEO and co-founder of Chainguard. Previously he was staff software engineer and lead for Google’s Open Source Security Team (GOSST). He has founded projects like Minikube, Skaffold, TektonCD and Sigstore.


SolarWinds and Log4j have made software supply chain security issues a topic of intense interest and scrutiny for businesses and governments alike.
SolarWinds was a terrifying example of what can go wrong with the integrity of software build systems: Russian intelligence s

リンク元