Are We Forever Doomed to Software Supply Chain Security?

Explore the critical challenges of software supply chain security in this 16-minute conference talk from TestJS Summit 2021. Delve into the growing adoption of open-source software and its associated security concerns, from attacks on language ecosystem registries to cloud-native application vulnerabilities. Learn how developers are targeted for malware distribution, the crucial role of open-source maintainers in releasing timely security fixes, and the new security challenges arising from the shift to cloud computing and infrastructure as code. Gain valuable insights into the complex landscape of software security and the ongoing efforts to protect against evolving threats in the development ecosystem.