How to SafeGuard Your Software Supply Chain

Watch Now

Most open source risk isn’t inevitable, it’s introduced through everyday decisions. So why are so many organizations still exposed? Explore the disconnect between available safer components and the risky ones still being used at scale. This conversation will help you rethink how your team approaches open source risk, and how to get ahead of it before it becomes a problem in your software supply chain.

In 2023, an alarming 96% of vulnerabilities found in open source downloads were actually avoidable. Shockingly, poor consumption practices led to a staggering 2.1 billion OSS downloads, introducing security risks despite the availability of safer and updated versions.

Sonatype CTO, Brian Fox and Guest Speaker, Forrester Senior Analyst, Janet Worthington, join forces to shed light on crucial data and insights for industry leaders, the significance of SCA testing, and the proactive measures teams take to brace themselves against future cyberattacks. They will delve into the implications of the ever-growing software supply chain regulations and the need for better OSS consumption practices.

Featured Speakers

Brian Fox

CTO and Co-Founder, Sonatype

Janet Worthington

Senior Analyst, Forrester