Protect Yourself Against Supply Chain Attacks

Explore the critical topic of supply chain attacks in this NDC Security 2022 conference talk. Learn about various attack vectors targeting development pipelines, including shell script vulnerabilities, package typosquatting, and internal package name squatting on public repositories. Discover how simple settings can be exploited to hijack environments, potentially leading to severe consequences. Gain insights into protecting your CI/CD pipeline, understanding package management risks, and implementing effective security measures. Delve into topics such as Software Composition Analysis, Software Package Data Exchange, and the importance of traceability in maintaining a secure supply chain. Equip yourself with the knowledge to safeguard your development processes against increasingly common supply chain threats.