🐺 [Oct 28] GitBlame: Werewolf Happy Hour @GitHub Universe
Securing the software supply chain from code signing to distribution. Covers provenance, dependency tracking, container image hardening, open source risk management, and the gap between corporate security tooling and open source ecosystems. Drawn from practitioners at Chainguard, Snyk, and others.
In episode 27 of The Secure Developer, Guy is joined by Jeff McAffer, director of Microsoft’s Open Source Programs Office, who...