Securing Shopify's Software Supply Chain - Mitigating Supply Chain Attacks

Explore strategies for securing software supply chains in this keynote presentation from KubeCon + CloudNativeCon North America 2022. Discover how Shopify protects millions of businesses from supply chain attacks using open-source software and cloud-based defensive techniques. Learn about implementing voucher and grafeas for cluster software control, applying the SLSA framework to establish software trust, and utilizing Falco for detecting malicious behavior. Gain insights into specific techniques for mitigating supply chain attacks and applying traditional defensive methods in cloud environments.