Steve Springett — An insiders checklist for Software Composition Analysis

Published: Aug. 27, 2019, 10:45 p.m.

Steve Springett is a technologist, husband, father, entrepreneur, and tequila aficionado. He is the creator of the OWASP @DependencyTrack and @CycloneDX_Spec. In this conversation, we begin with the problem of software supply chain risk and the failures of commercial Software Composition Analysis tools. We then go through an extensive list of criteria for purchasing a [...]

The post Steve Springett — An insiders checklist for Software Composition Analysis appeared first on Security Journey Podcasts.