Why Do We Keep Ignoring CI Security With François Proulx Open Source Security podcast

Artwork

Open Source Software Development Security Josh Bressers Tech Cybersecurity Open Opensource Source Open Source Security

内容由Open Source Security and Josh Bressers提供。所有播客内容（包括剧集、图形和播客描述）均由 Open Source Security and Josh Bressers 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Open Source Security « »
Why do we keep ignoring CI security with François Proulx

10M ago 23:38

分享

MP3•单集首页

内容由Open Source Security and Josh Bressers提供。所有播客内容（包括剧集、图形和播客描述）均由 Open Source Security and Josh Bressers 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

François Proulx, a supply chain security researcher at Boost Security, discusses how continuous integration (CI) and build pipeline security represents a critical and overlooked hole in our supply chain security. It seems like most supply chain compromises are actually from CI system breaches rather than direct code compromise, yet we seem to obsess over everything on either side of the CI system. François has a bunch of really good practical suggestions for how we can start to improve our CI security today.

The blog post for this episode can be found at https://opensourcesecurity.io/2025/2025-02-ignoring_ci_security_francois_proulx/

… continue reading

506集单集

#Open Source #Software Development #Security #Josh Bressers #Tech #Cybersecurity #Open #Opensource #Source #Open Source Security

Artwork

Why do we keep ignoring CI security with François Proulx

Open Source Security

277 subscribers

published 10M ago

分享

MP3•单集首页

内容由Open Source Security and Josh Bressers提供。所有播客内容（包括剧集、图形和播客描述）均由 Open Source Security and Josh Bressers 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

François Proulx, a supply chain security researcher at Boost Security, discusses how continuous integration (CI) and build pipeline security represents a critical and overlooked hole in our supply chain security. It seems like most supply chain compromises are actually from CI system breaches rather than direct code compromise, yet we seem to obsess over everything on either side of the CI system. François has a bunch of really good practical suggestions for how we can start to improve our CI security today.

The blog post for this episode can be found at https://opensourcesecurity.io/2025/2025-02-ignoring_ci_security_francois_proulx/

… continue reading

506集单集

#Open Source #Software Development #Security #Josh Bressers #Tech #Cybersecurity #Open #Opensource #Source #Open Source Security

모든 에피소드

×

欢迎使用Player FM

Player FM正在网上搜索高质量的播客，以便您现在享受。它是最好的播客应用程序，适用于安卓、iPhone和网络。注册以跨设备同步订阅。

收听超过500个主题

边探索边听这个节目