Paul McCarty -- The Burrito Analogy of the Software Supply Chain

"Visualizing the Software Supply Chain" is a project which aims to kick off a discussion about the scope and breadth of the software supply chain. Paul McCarty is a DevSecOps evangelist and the founder of Secure Stack, which helps software engineers and security teams collaborate better while building more secure applications. Paul is the author of several open source projects and is a collaborator on a number of others and helps run three meetups where he lives in Australia. Paul tried to be a professional snowboarder in the two thousands, but is now a skater dad who's passing his love of hacking software onto his kids.Connect with Paul McCarty:→ Visualizing the Software Supply Chain (GitHub)→ DevSecOps Playbook (GitHub)Mentioned in this episode:→ Visualizing the Software Supply Chain (GitHub)→ DevSecOps Playbook (GitHub)→ SecureStack→ OWASP DevSecOps Maturity Model (DSOMM)→ OWASP CycloneDX→ Minimum Viable Secure ProductFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Paul McCarty: The Burrito Analogy of the Software Supply Chain03:47 Were referred to. That. So how did, I mean, how'd you04:53 Yeah, and I know we wanna talk about software. Supply chain06:36 Have you thought about how software supply chain differs from other09:52 You mentioned something that, uh, has been a bit of a15:31 Making me super hungry for a burrito, by the. way. Like17:33 SCV or is this source, yeah, sorry. S-C-V Source code. What's21:00 You say, um, ser, when you say SaaS solutions there, can22:05 And one of the things I found interesting, Paul, about this25:20 This a project that other people could submit PRs against27:28 I think we had, um, mentioned of the DevSecOps Playbook, and30:33 Just to think about security some more. Um, And for developers32:03 Paul, yeah. From a, uh, kind of a key takeaway call