Building a Secure, Efficient, Compliant OSS Supply Chain at Scale - Lecture

Building a Secure, Efficient, Compliant OSS Supply Chain at Scale - Lecture

Explore a conference talk on constructing a secure, efficient, and compliant open-source software (OSS) supply chain at scale. Learn about the challenges and importance of managing FOSS within large companies, including security risks, massive demands, and engineering habits. Discover strategies for implementing internal Maven and NPM servers, conducting essential training, and establishing security fixing processes. Gain insights into the long-term journey of building a robust FOSS supply chain that goes beyond compliance, using Baidu's experience as a case study.