Michael Gissing
I am a software engineer by profession, passionate about open source software and application security. I try to follow the DevSecOps approach of enabling software development teams to integrate security tools into their daily work through automation and CI/CD.
Session
The number of external dependencies in today's software has grown steadily over the years. With all these dependencies come bugs and security issues. Like a flock of sheep, it can be difficult to keep track of them all, take care of their needs, and leave no one behind.
In this talk, we'll present solutions for software composition analysis and dependency management using free and open source tools. Afterwards, we hope you will be convinced that this is something everyone should consider in their software projects, because it is relatively easy to get started, and it will make your life easier in the long run.