Скачать или смотреть Why Your Software Supply Chain is Broken | AppDevANGLE

45% of organizations will face a software supply chain attack by 2026—a massive jump from just a few years ago. With 90%+ of modern code being open source, organizations are literally running code from "strangers on the internet."
In this high-impact episode of AppDevANGLE, Paul Nashawaty is joined by Dan Lorenc, Founder and CEO of Chainguard , to discuss the fragility of the modern software ecosystem. They reveal how incidents like SolarWinds and Log4J exposed a crisis in integrity, and why simply scanning for vulnerabilities is no longer enough.
Learn how to balance developer speed (pushing code hourly) with DevSecOps security, and why the rise of AI-generated code and new regulations like the EU Cyber Resilience Act (CRA) are forcing a security catch-up across the entire industry.
Key Takeaways & Discussion Points:
The Alarming Threat: Why software supply chain attacks are the fastest-growing cybersecurity threat today.
The Open Source Paradox: The terror of deploying code written by strangers and why open source security is so fragile.
Speed vs. Security: How Chainguard allows AppDev teams to accelerate (24% want hourly releases!) while maintaining trust.
The Catch-Up Left: Why security teams were left behind in the shift to public cloud and Infrastructure as Code, and how DevSecOps is catching up.
The AI Accelerant: How the mainstreaming of AI is accelerating code development by citizen and professional developers, making governance critical.
Compliance is Here: Deep dive into the massive global impact of new mandates like the EU CRA and NIST SSDF.
Forms Aren't Enough: Why SBOMs and executive signatures alone can't protect you from malware and vulnerability chaos.


00:00 - Securing the Software Supply Chain: Understanding Threats and Ensuring Integrity
03:38 - Navigating Software Supply Chain Security: Balancing Challenges and Developer Experience
07:58 - Integrating AI and Security: Evolving Practices in Software Development
10:35 - Impact of Regulatory Changes
15:39 - Examining the Constraints and Conclusions of SBOMs and Digital Signatures