Webinar
Think About Your Audience Before Choosing a Webinar Title
Sponsored by WHITESOURCE
What You’ll Learn in This Webinar
Very few people today doubt the principles and benefits of open source, but you can definitely be forgiven for having concerns about its security. Some of the ways we rely on open source today are fundamentally flawed, yet almost never discussed — from registries hosting unsigned artifacts of unreproducible source to package managers which propagate new versions of dependencies at the earliest opportunity.
It's time to identify these unsolved — and mostly undiscussed — risks, evaluate their potential impact and determine what can be done in the open source community to address them.
In this webinar, Rhys Arkins, director of product management at WhiteSource, will discuss why we need reproducible builds in open source, verified artifacts and why the majority of package managers may need a substantial change, while one in particular got it right. He will also provide some recommendations on defensive use of open source particularly for products and industries at the highest risk of software supply chain attacks.
Rhys Arkins is responsible for developer solutions at WhiteSource. He was the founder of Renovate Bot, an automated tool for software dependency updating, which was acquired by WhiteSource in 2019. Rhys is particularly fond of automation and a firm believer in never sending humans to do a machine’s job.
