Season 1: Open Source Security

Episode 4: 5 Steps for Securing Your Open Source Supply Chain

Most modern applications are assembled from open-source components with developers typically writing less than 15% of the code for their application. Here are the 5 Steps for securing your open source supply chain.

Step 1: Maintain a Software Bill of Materials (SBOM)

Step 2: Perform Due Diligence - Scan for Vulnerabilities

Step 3: Have a Centralized Artifact Repository - Use Only Approved Software

Step 4: Always Use Latest - Don't Use Stale Components

Step 5: Run a Web Application Firewall (WAF)