Supply Chain Warfare: CI/CD Threats And Open Source Security With François Proulx The Security Repo podcast

Content provided by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

The Security Repo »
Supply Chain Warfare: CI/CD Threats and Open Source Security with François Proulx

1d ago 29:34

MP3•Episode home

Supply Chain Warfare: CI/CD Threats and Open Source Security with François Proulx

In this episode of the Security Repo Podcast, François Proulx, VP of Security Research at Boost Security, discusses the evolving threats in software supply chain security, particularly focusing on attacks targeting CI/CD pipelines. He explains how open source tools like "Poutine" are being used both defensively and offensively in the ongoing battle to secure build systems. François also shares his journey into security, lessons from working at Intel, and practical advice on dependency pinning, short-lived credentials, and password best practices.

https://www.linkedin.com/in/francoisp/

https://boostsecurity.io/blog/unveiling-poutine-an-open-source-build-pipelines-security-scanner

[https://nsec.io /](https://nsec.io/)

François is VP of Security Research at BoostSecurity, where he leads the Supply Chain research team. With over 10 years of experience in building AppSec programs for large corporations (such as Intel) and small startups he has been in the heat of the action as the DevSecOps movement took shape. François is one of founders of NorthSec and was a challenge designer for the NorthSec CTF.

115 episodes

#Tech #Mackenzie Jackson & Dwayne McDaniel #Dwayne McDaniel #Mackenzie Jackson