Name: SCA for Containers: The Good, the Bad, and the Truth - Arun Azhakesan, Siemens Healthineers & Philippe Ombredanne, AboutCode
Start: 2024-09-17T16:55:00+0200
End: 2024-09-17T17:35:00+0200

September 16-18, 2024
Vienna, Austria
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time (UTC/GMT +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Tuesday September 17, 2024 16:55 - 17:35 CEST

Room 0.14 (Level 0)

Containers revolutionized the software development and deployment process. But there are still practical concerns, especially related to software supply chain integrity and security, that require further improvements. Software Composition Analysis (SCA) identifies components used in software applications and systems, often for software supply chain concerns like SBOMs, which is increasingly important for distributed, containerized systems. Many open source and proprietary SCA tools are marketed specifically for containers. After testing many open source and proprietary tools, we completed a project comparing the accuracy, depth, and breadth of these tools' detection capabilities. The results were not always good. In this talk, Arun from Siemens Healthineers and Philippe from AboutCode will share their experiences so you don't make the same mistakes.

Speakers

Arun Azhakesan

Head of Secure Development Lifecycle, Siemens Healthineers

Arun Azhakesan heads the Secure Development Lifecycle team at Siemens Healthineers, steering secure development lifecycle activities within the Corporate Cyber Security organization. He co-leads the Eclipse SW360 project, chairs the OpenChain India Workgroup, and actively participates... Read More →

Philippe Ombredanne

Lead Maintainer, AboutCode

Philippe Ombredanne is a FOSS hacker passionate about enabling easier and safer reuse of open source code. He is the lead maintainer of the AboutCode stack of open source tools for Software Composition Analysis and license and security compliance, including the industry-leading ScanCode... Read More →

SCA containers OSSEU24 pdf

Tuesday September 17, 2024 16:55 - 17:35 CEST
Room 0.14 (Level 0)

ContainerCon

Audience Level Any
Presentation Slides Attached Yes

Open Source Summit Europe 2024

Arun Azhakesan

Philippe Ombredanne

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!