Securing Your .NET Application Software Supply Chain

Explore hands-on techniques for securing a .NET application's software supply chain in this NDC Oslo 2021 conference talk. Delve into the complexities of modern software development processes and learn how to address security risks at various stages, from source code access to deployment. Examine real-world examples like SolarWinds and CodeCov to understand potential vulnerabilities. Discover practical strategies based on Google's SLSA framework and Software Bill of Materials (SBOM) concepts. Cover topics such as GIT commit signing, dependency confusion, third-party library security, reproducible builds, artifact signing, and pipeline security policies. Gain valuable insights into protecting your software development lifecycle and mitigating risks in the increasingly complex software supply chain landscape.