The Journey to Software Supply Chain Security
The past five years have demonstrated that everyone is at risk of a software supply chain attack. The software community is looking for informed guidance and practical solutions to keep their pipelines secure from rogue infiltration, and the attacks keep coming. Traditionally, the software industry has focused primarily on addressing security vulnerabilities in their software’s codebase. Unfortunately, the software supply chain problem is far broader and deeper, spanning Import, Build and Use.
But security has always been seen as a blocker to getting software to market, and with the exception of security-conscious industries, is typically given a back seat or put on hold in pursuit of revenue. This has put development and security teams at odds. Now, organizations have no choice but to find a way to make moving fast and securing things work together.
This eBook is your guide through the unknown towards software supply chain security, taking you all the way from Complete Anarchy to Anti Entropy in five stages.
Learn how to:
- Balance breadth, depth and change as entry points for potentially malicious attacks
- Discover the 5 stage journey from Complete Anarchy to Observable Chaos, Automated Security, Verifiable Safety, and finally Enti Entropy
- Eliminate implicit trust in open source components and implement scalable processes to verify their origins
Learn how to use the organization security dashboard feature on the ActiveState Platform to view all open source vulnerabilities across your organization.
Make the Supply-chain Levels for Software Artifacts (SLSA) framework a reality and secure your development pipeline with real world examples.
Learn about ActiveState's secure build platform to import source code, vetted for licensing and maintainability, and securely build the open source packages your team requires.
About the Authors
Dana Crane
With 25+ years in the software industry, Dana has had his share of both crossing and falling into the chasm. He’s currently the Product Marketing Manager at ActiveState Software. You can find more of his work at danacrane.medium.com and danacrane.substack.com
Scott Robertson
Passionate about creating products that solve real problems, Scott drives ActiveState’s technology vision based on his experience of over 20 years knees deep in code. Over that time, he’s authored a book, founded 3 startups and sold one of them. As ActiveState’s CTO, he understands the pains faced in pushing software into production and the challenges big business has to stay fast and relevant. He helps companies do both.
Recommended Resources
Learn How ActiveState Can Help
Talk to our security experts about how we can help you securely integrate open source into your software supply chain.
© 2023 ActiveState Software Inc. All rights reserved. ActiveState®, ActivePerl®, ActiveTcl®, ActivePython®, Komodo®, ActiveGo™, ActiveRuby™, ActiveNode™, ActiveLua™, and The Open Source Languages Company™ are all trademarks of ActiveState.
Take the 5 Stage Journey
Level 0
Level 1
Level 2
Level 3
Level 4
Complete Anarchy
Observable Chaos
Automated Security
Verifiable Safety
Anti Entropy
Download the Free eBook
