Tracy Ragan discusses software supply chain management and the importance of generating and consuming Software Bill of Materials (SBOMs) in decoupled architectures. She explains the challenges of managing libraries and dependencies in microservices and the need for aggregated SBOMs. Tracy emphasizes the importance of rapid response to vulnerabilities and the value of SBOMs in facilitating this response. She also discusses the requirements and industries for SBOMs and the role of SBOMs in analyzing and securing open source and commercial software.
Tracy introduces DeployHub as a DevSecOps evidence store that helps teams gain confidence in the use and consumption of open source software and enables rapid response to vulnerabilities.
Takeaways
Chapters
00:00 Introduction to Software Supply Chain Management
03:22 Understanding Architecture in the Context of SBOMs
06:12 Configuration Management in Monolithic Applications
07:39 Challenges of Decoupled Architecture in Microservices
09:20 The Need for SBOMs in Decoupled Architectures
11:15 Generating Aggregated SBOMs for Microservices
13:24 Generating SBOMs for Each Microservice
15:23 Generating SBOMs for Every Build
17:15 Managing Libraries and Dependencies in Decoupled Architectures
19:31 The Importance of Consuming SBOM Data
22:30 Generating SBOMs with Tools
24:28 The Format and Consumption of SBOMs
27:55 The Importance of Consuming and Analyzing SBOM Data
29:43 Requirements and Industries for SBOMs
33:29 SBOMs for Open Source and Commercial Software
36:01 The Role of SBOMs in Rapidly Responding to Vulnerabilities
39:05 The Value of SBOMs in Rapid Response Systems
43:13 Defining the Quality of SBOMs
44:06 Understanding the Impact of Vulnerabilities
46:03 The Importance of Rapid Response
48:35 The Need for Centralized Data and Information
50:27 Challenges in Fixing Vulnerabilities
52:14 The Accountability of Open Source Software
53:41 The Difficulty of Controlling Open Source Consumption
55:16 Introduction to DeployHub
57:43 Managing the Software Supply Chain
Tracy Ragan's Links:
Snowpal Products
10+ ways to improve Employee Retention
Automated Economy Series (4/N): Impact of Automated Economy on Global Economic Growth (feat. David Kramer)
World Traveler Series (4/N): Welcome to Africa, Part 2/2 (feat. Prasanna Veeraswamy)
World Traveler Series (3/N): Welcome to Africa, Part 1/2 (feat. Prasanna Veeraswamy)
World Traveler Series (2/N): Why cultural learnings have a profound impact on business outcomes (feat. Prasanna Veeraswamy)
(Part 3/N) Terraform: Create Image Resource
(Part 4/4) Confluent Cloud (Managed Kafka as a Service) - What is a connector & How to create Custom Connectors
(Part 2/2) Remote Work - An Engineer’s Perspective (feat. Jason Crum)
(Part 1/2) Remote Work - An Engineer’s Perspective (feat. Jason Crum)
(Part 3/4) Confluent Cloud (Managed Kafka as a Service) - Create a Go client to consume messages
(Part 2/4) Confluent Cloud (Managed Kafka as a Service) - Create a Go client to publish messages
(Part 1/4) Confluent Cloud (Managed Kafka as a Service) - Create a cluster, generate API keys, create topics, publish messages
2 engineers discussing many things about Software Development (feat. Serkan Durusoy)
World Traveler Series (1/N): Learnings from Global Travels about gaps in App Localizations (feat. Prasanna Veeraswamy)
Impact of Gratitude, Forgiveness, Expectations on Mental Health (feat. Vidhi Vohra)
Fundamentals of Sales (feat. Deva Rangarajan)
(Part 2/2) Coaching and Self Development (feat. Dan Tudorache)
(Part 1/2) Coaching and Self Development (feat. Dan Tudorache)
(Part 2/N) Terraform: Import Existing Resource
Automated Economy Series (3/N): Education in Automated Economy (feat. David Kramer)
Join Podbean Ads Marketplace and connect with engaged listeners.
Advertise Today
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast