Software Dependency Risks
Vandana highlights the critical need for thorough review processes before committing changes to software packages, citing alarming incidents involving malicious dependencies. She emphasizes the importance of testing updates in lower environments to avoid potential issues, advocating for proper documentation and tracking through software bills of materials. Additionally, the conversation touches on the significance of logging and monitoring, referencing high-profile breaches to illustrate the consequences of insufficient oversight.In this clip
From this podcast
Software Engineering Radio - the podcast for professional software developers
Episode 514: Vandana Verma on the Owasp Top 10
Related Questions