If only people would realize that software supply chain is far more then just
- Open source components
- Your CI / CD pipeline
If only people realize that software supply chain security in its current form is as much a combined effort as anything could be.
And to top things off, the one thing we are pushing hard for in this area “SBOM’s” are the one thing software industry has never been able to get right so far “INVENTORY”.
Here is to hoping that this time we collectively do a better job in inventory to get the ball rolling.
#softwareSupplyChain #informationSecurity