Before the Build: How to Secure Your Software Supply Chain

Every package your pipeline pulls is an act of trust.

Builds install thousands of open source packages without a second thought. Attackers know it, and they're poisoning packages at the source.

Join us and hear how to check every package at the door, from engineers doing it at enterprise scale.

• The inside story. Where to enforce policy, how to handle new releases, and how to keep developers happy.
  
  
• Security without the slowdown. Block risky dependencies at enterprise scale without slowing CI/CD.
  
  
• Drinks, conversation, and, of course, free socks. Compare notes with platform and security leads from across the Bay Area.