Upstream: The Software Supply Chain Security Podcast presented by Anchore

The Path to Supply Chain Security | A Chat with John Yeoh of Cloud Security Alliance

In this episode, John Yeoh [https://www.linkedin.com/in/johnyeoh/], Global Vice President of Research at Cloud Security Alliance,  joins hosts Kim Weins [https://www.linkedin.com/in/kimweins/] and Josh Bressers [https://www.linkedin.com/in/joshbressers/] to discuss the state of security in the cloud and how to solve supply chain pain points like misconfigurations, zero trust, and transparency. They explore the need to align best practices and how the Global Security Database initiative is working to unify vulnerability data disclosure across the industry.

Velocity Isn’t Just for Fighter Jets | How the US Air Force Develops Secure Software

In this episode, Matt Huston [https://www.linkedin.com/in/matthew-huston-64b859162/], CISO of the Platform One [https://software.af.mil/team/platformone/] program in the United State Air Force, joins Kim Weins [https://www.linkedin.com/in/kimweins/] and Josh Bressers [https://www.linkedin.com/in/joshbressers/] to discuss how the USAF is innovating with modern DevSecOps practices while meeting exacting government standards. They dive into how software factories within the U.S. Department of Defense are leveraging the same practices followed by industry leaders to dramatically speed up the delivery of secure software.

Security as a Journey | Let's Make Better Mistakes Tomorrow

In this episode, Kim Weins and Josh Bressers engage Stephen O’Grady [https://redmonk.com/team/stephen-ogrady/], co-founder and principal analyst at RedMonk [https://redmonk.com/], on how improving the developer experience can pay dividends for security up and down the software supply chain.

Getting Real | Practical Uses for SBOMs Today

In this episode, Neil Levine [https://www.linkedin.com/in/neilwlevine/] of Anchore joins Kim Weins [https://www.linkedin.com/in/kimweins/] and Josh Bressers [https://www.linkedin.com/in/joshbressers/] to discuss the power of SBOMs. They explore practical first steps for using SBOMs and how they can improve software supply chain security starting today.

PB&J | Why SBOMS & Security Scanning Go Together

Steve Lasker [https://www.linkedin.com/in/stevelasker/] of Microsoft joins the show and talks with host Kim Weins [https://www.linkedin.com/in/kimweins/] and Josh Bressers [https://www.linkedin.com/in/joshbressers/] about how the software ecosystem will generate and use SBOMs.  He reveals the challenge of giant SBOMs and how Microsoft is providing transparency to customers about the components in their software.