Paul McCarty -- The Burrito Analogy of the Software Supply Chain

"Visualizing the Software Supply Chain" is a project which aims to kick off a discussion about the scope and breadth of the software supply chain. Paul McCarty is a DevSecOps evangelist and the founder of Secure Stack, which helps software engineers and security teams collaborate better while building more secure applications. Paul is the author of several open source projects and is a collaborator on a number of others and helps run three meetups where he lives in Australia. Paul tried to be a professional snowboarder in the two thousands, but is now a skater dad who's passing his love of hacking software onto his kids.

Connect with Paul McCarty:
→ Visualizing the Software Supply Chain (GitHub)
→ DevSecOps Playbook (GitHub)

Mentioned in this episode:
→ Visualizing the Software Supply Chain (GitHub)
→ DevSecOps Playbook (GitHub)
→ SecureStack
→ OWASP DevSecOps Maturity Model (DSOMM)
→ OWASP CycloneDX
→ Minimum Viable Secure Product

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Paul McCarty: The Burrito Analogy of the Software Supply Chain
03:47 Were referred to. That. So how did, I mean, how'd you
04:53 Yeah, and I know we wanna talk about software. Supply chain
06:36 Have you thought about how software supply chain differs from other
09:52 You mentioned something that, uh, has been a bit of a
15:31 Making me super hungry for a burrito, by the. way. Like
17:33 SCV or is this source, yeah, sorry. S-C-V Source code. What's
21:00 You say, um, ser, when you say SaaS solutions there, can
22:05 And one of the things I found interesting, Paul, about this
25:20 This a project that other people could submit PRs against
27:28 I think we had, um, mentioned of the DevSecOps Playbook, and
30:33 Just to think about security some more. Um, And for developers
32:03 Paul, yeah. From a, uh, kind of a key takeaway call