))
OSS management use cases for software supply chain security
Manage episode 446234055 series 2999049
Content provided by Revenera Experts. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Revenera Experts or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.
The software supply chain is at the forefront of security discussions in companies and governments across the world. Join our expert team as they walk you through four key open source software (OSS) management use cases that enable you to confidently identify security vulnerabilities in open-source and third-party components within your code, as well as manage OSS license compliance and build a Software Bill of Materials (SBOM).
If you are new to SBOMs or are looking to take your process to the next level of maturity, this is the podcast for you!
In this session we provide an industry update and an overview of four practical OSS management use cases with best practices for how to accomplish the following:
- A local developer compliance check in the IDE before code check-in
- Security flow for assessing and annotating security vulnerabilities associated with your SBOM parts and generating a VEX with your analysis data
- Construction of an SBOM in SPDX, CycloneDX, and human readable formats
- Preparation of third-party notices to comply with OSS license attribution requirements
You can register to view the webinar with slides here - https://info.revenera.com/SCA-WBNR-OSS-Management-UseCases
39 episodes
Share
