Foundations of DevSecOps: Avoiding Software Supply Chain Attacks

With software supply chain attacks on the rise, security risks have never been more critical. This hands-on workshop focuses on JFrog’s security tools - from shift left to shift right - and how to integrate them into your DevSecOps strategy. We’ll explore how to secure your software supply chain, reduce vulnerabilities, and automate key workflows, ensuring your artifacts and dependencies are safe throughout the development lifecycle. Key Skills Learned: • Understand how JFrog tools from Curation to Xray and Advanced security can accelerate your DevSecOps goals. • Use JFrog security scan capabilities and Developer-Focused Security. • Gain hands-on experience in configuring repositories, scanning for vulnerabilities, and automating delivery pipelines. • Implement best practices to secure your software supply chain, reducing the risk of vulnerabilities and improving compliance. • How to shift security left by embedding security measures early in your SDLC. Who Should Attend: • Engineers working across SDLC phases - Development, Automation, DevOps, and SRE. • Security Engineers focused on securing the software supply chain with the JFrog platform. Join us to deepen your DevSecOps knowledge and enhance your organization’s security posture with JFrog’s trusted tools. Sign Up Today!