Topic

Software Supply Chain Security

All digests tagged Software Supply Chain Security

Suggested route

Topic journey

Move from earlier context through the available material to the newest signals. This route is a reading aid, not a difficulty ranking.

Start here

From "Trust Me" to "Verify Me" - Tom van den Berg - NDC Copenhagen 2026 Aug 11, 2026 · 54:29 Modern software supply chain attacks start in your build pipeline. We explore how provenance and attestation turn “trust me” into verifiable evidence, using SLSA and OCI registries.

Recent signals

Exploits Now Beat Patches: Open Source Security in the AI Era - Patrick Smyth, Chainguard Oct 28, 2026 · 21:47 In the AI era, exploits now beat patches. Learn how to secure your software supply chain against advanced threats targeting CI/CD, developer laptops, and zero-day vulnerabilities using SLSA and Sigstore.

AI Engineer

Exploits Now Beat Patches: Open Source Security in the AI Era - Patrick Smyth, Chainguard

In the AI era, exploits now beat patches. Learn how to secure your software supply chain against advanced threats targeting CI/CD, developer laptops, and zero-day vulnerabilities using SLSA and Sigstore.

Read article

NDC Conferences

From "Trust Me" to "Verify Me" - Tom van den Berg - NDC Copenhagen 2026

Modern software supply chain attacks start in your build pipeline. We explore how provenance and attestation turn “trust me” into verifiable evidence, using SLSA and OCI registries.

Read article