Securing the Software Supply Chain with Tracy Ragan, Founder at DeployHub

Welcome back to T3 Talks! This week, Sam and Austin have a blast chatting with Tracy Ragan, CEO and Co-Founder of DeployHub and open source software advocate. She scares us with the 23,000 software vulnerabilities found per year, many in packages developers don't even realize they're using. We talk Software Bills of Materials (SBOMs), Security as a Sidecar vs Security by Design, and reminds us that 805 of security issues are identified and fixed pre-deployment, but 100% of attacks happen in production.Effort sponsored in whole or in part by the Air Force Research Laboratory, USAF, under Partnership Intermediary Agreement No. FA9550-22-3-0001. The U.S. Government is authorized to reproduce and distribute reprints for Governmental purposes notwithstanding any copyright notation thereon. The views and conclusions contained herein are those of the authors and should not be interpreted as necessarily representing the official policies or endorsements, either expressed or implied, of the Air Force Research Laboratory.