Best Practices for Mitigating the Risk of Software Supply Chain Threats The Open Source Supply Chain Can Be Fixed2 For most software vendors, the way they import, build and consume open source code is at odds with their software development security and integrity goals. Simply put, too many organizations: The problem lies in the fact that the software supply chain for most vendors is extremely complex, being both wide and deep. As a result, software vendors may be unduly exposing their customers to compromise when (not if) they suffer an open source supply chain attack. This white paper is a companion piece to our Software Supply Chain Security survey, which found that supply chain security across the software industry as a whole is far more immature than expected. This paper examine

Join for free to read