Artwork

Content provided by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
Player FM - Podcast App
Go offline with the Player FM app!

Code signing and securing the software supply chain with Billy Lynch

34:44
 
Share
 

Manage episode 378288624 series 3516169
Content provided by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

In this episode, we go on a deep dive with Billy Lynch from Chainguard into application and code signing and how it can be used to ensure the supply chain is legitimate. Billy has an impressive background including spending 8 years at Google before joining Chainguard and not only helps us understand how signing can be used in security but also what is the latest developments and technology in this field.

Links:

https://www.chainguard.dev/

https://www.linkedin.com/in/wflynch/

BIO

Billy is a staff software engineer at Chainguard, working on developer tools and securing software supply chains for everyone! He is an active contributor and maintainer to the Sigstore and Tekton projects, and is the creator of Gitsign. Prior to working at Chainguard, Billy worked on several developer tool teams at Google including Cloud Build, Google Code, and Cloud Source Repositories.

  continue reading

50 episodes

Artwork
iconShare
 
Manage episode 378288624 series 3516169
Content provided by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

In this episode, we go on a deep dive with Billy Lynch from Chainguard into application and code signing and how it can be used to ensure the supply chain is legitimate. Billy has an impressive background including spending 8 years at Google before joining Chainguard and not only helps us understand how signing can be used in security but also what is the latest developments and technology in this field.

Links:

https://www.chainguard.dev/

https://www.linkedin.com/in/wflynch/

BIO

Billy is a staff software engineer at Chainguard, working on developer tools and securing software supply chains for everyone! He is an active contributor and maintainer to the Sigstore and Tekton projects, and is the creator of Gitsign. Prior to working at Chainguard, Billy worked on several developer tool teams at Google including Cloud Build, Google Code, and Cloud Source Repositories.

  continue reading

50 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Quick Reference Guide