https://peertube.watch/videos/watch/6ad74de4-f32e-4256-9411-05b8535e0711 As organizations start their software supply chain security (SSCS) journey, more and more documents (like SBOMs and VEXs) are being created. But having these documents produced will get us just a half-way through. We need ways to store, index, search and analyze potentially large numbers of SSCS documents to become aware of our vulnerabilities and be able to react to them quickly. Meet trustification (https://trustification.io), an open source project that allows us to store and analyze our security data at scale. Trustification allows users to manage their portfolio of applications, containers and products throughout their lifecycle. Providing transparency of their technical make up and dependencies as well as highlighting their vulnerabilities.. In this session, we will describe the Trustification project in detail. We'll start by covering basic requirements for this kind of system. Having a S3 compatible storage, flexible vulnerability collectors, support for powerful query language and ability to find the relationship between different components is the key. We'll go through the architecture and all the services needed to achieve these goals. We'll end up with a brief demo of the working system. After the session you should be able to start using Trustification to make your software products more trusted. Speakers: Marco Rizzi, Dejan Bosanac, Phil Cattanach, Track: Software Bill of Materials devroom, Room: K.4.401, When: Sunday 4 February 2024, 11:30–11:45 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links Slides, Trustification Github, Trustification Website, Trustification Demo, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “Make your software products trustable” by Marco Rizzi, Dejan Bosanac, Phil Cattanach, FOSDEM 2024. Original recording: 2024/k4401/fosdem-2024-3073-make-your-software-products-trustable.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Mon, 26 Oct 2026 02:12:30 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/6ad74de4-f32e-4256-9411-05b8535e0711 All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.