|a Futurum companyCoverage
Cloud NativeCI/CDDevSecOpsPlatform EngineeringDataOpsContinuous TestingLow-Code / No-CodeIT as CodeEnterprise DevOpsMedia
Techstrong TV LiveVideo InterviewsTech Field DayTechstrong GangAgents of DevSecurity BoulevardCloud Native NowDigital CxO
Contributing Writer
Dan started projects like Minikube, Skaffold, and Kaniko to make containers easy and fun, then got so worried about the state of OSS supply-chains he partnered up with Kim and others to found the Tekton and Sigstore projects to make it easier to build and use containers securely; as well as SLSA to create a common language for software security and supply chain integrity. He has been involved with the Cloud Native Computing Foundation, chaired the Continuous Delivery Foundation technical oversight committee, and sits on the governing board and technical advisory committee for the Open Source Security Foundation. He's now a founder and CEO at Chainguard, a startup focused on software supply chain security.
The open source software (OSS) supply chain is under attack. As evidenced by the recent Log4Shell vulnerability, the OSS supply chain is increasingly a focus for attackers seeking to exploit weak links in security. A number of research reports have recorded a significant increase in so-called ‘next-gen software supply chain attacks‘ over the past decade. […]
Mar 15, 2022 · 3 min