The software supply chain consists of packages, imports, dependencies, containers, and APIs. These different components each have unique security risks. To ensure the security of their software supply chain, many developers use tools to analyze and scan their infrastructure for vulnerabilities. Barak Schoster works at Bridgecrew, a DevSecOps cloud security platform. He joins the show to talk about the risks of the modern software supply chain and what his company does to alleviate it. Sponsorship inquiries: sponsor@softwareengineeringdaily.com Get Stream:  Check it out at https://getstream.io/ Private Internet Access: .Go to https://privateinternetaccess.com/SEDaily Work OS: To learn more and get started, go to softwareengineeringdaily.com/workos Influx Data: To learn more and get started for free, visit influxdata.com/sedaily Cox Automotive: visit COXAUTOTECH.COM

Learn more about your ad choices. Visit megaphone.fm/adchoices