Three Things That Each Developer Should Know to Help Secure Code Base
Discover three essential techniques for enhancing code security in this informative conference talk. Explore the rising costs of cybercrime and the increasing sophistication of cybercriminal syndicates, including the weaponization of open-source software and repository poisoning. Learn about Software Bill of Materials (SBOM) for improved dependency transparency, Reproducible Builds for verifying software integrity, and SigStore for secure build signing. Gain insights into the current threat landscape, particularly in light of recent geopolitical events. Examine real-world examples and practical applications of these security measures, with a focus on automation and large-scale alert systems. Familiarize yourself with tools such as Syft, Bomber, Grype, and Sonatype BOM Doctor to implement these security practices effectively.