Lots of things get improved by building continuous delivery pipelines and then going back to them and iteratively making improvements. Pipelines themselves can be a place where we accrue tech debt - even at the entry point to those pipelines. So let's look at branching strategies.

When Wendy Nather began work as an information security analyst, she started asking her CISO friends a question: ‘If you just took a CISO job at a company that had no security, what would you buy?’ The answers fascinated her. Now at Duo (Cisco), she set out to formalize research that was released as Cisco Secure’s Security Outcomes Study. Wendy discusses the process on this week’s podcast.

We’ve been hearing about software supply chain vulnerabilities quite a bit lately, from Solar Winds to CodeCov. How do these relate to technical debt? Ah, that’s a complicated questions, because each of its components are discussing complex things. In this episode, Chris and Nick try to hash it out, and to sort through what’s important.