Trials, Tribulations and Triumphs - An End User's Perspective on Software Supply Chain Security

Explore a comprehensive conference talk that delves into the challenges, struggles, and successes of enterprise end users in managing software supply chain security. Gain insights from the OpenSSF End User Working Group's perspective on the complexities of software intake paths and the increasing importance of protecting against cyberattacks. Learn about the current state of software supply chain threats, the evolution of mitigation efforts, and the vision for the future of open source software security. Discover the group's views on public and private sector initiatives, the need for a shared taxonomy, the state of Software Bills of Materials (SBOMs), and the importance of integrated efforts between public and private sectors in addressing these critical issues.