Threat Alert | nullifAI - Malware Discovered on ML Models Hosted on Hugging Face
Learn More
Webinar | Hugging Face & ML Malware: How RL Discovered NullifAI
Register Now
White Paper | AI is the Supply Chain: How the Rise of AI Will Impact Software Supply Chain Security
Read how

What is Software Supply Chain Security Scanning?

01/19/2023

In this lesson, Matt explains why it is essential to integrate automatic software supply chain security scanning into the traditional DevOps process.

Keep learning

• SBOMs are critical — but only the first step
• Special: The State of Supply Chain Security
• Get a free SBOM and supply chain risk analysis

Matt Rose

About Author: Matt Rose

Field CISO at ReversingLabs. Matt Rose has an extensive background in application security, object-oriented programming, multi-tier architecture design and implementation, and internet/intranet development. His areas of expertise include Application Security, SAST, DAST, IAST, SCA, DevSecOps, and Threat Modeling. Matt is an accomplished public speaker and has been quoted in 50+ AST industry media publications.

Related episodes

Reproducible Builds: Graduate Your Application Security
ReversingGlass

Reproducible Builds: Graduate Your Application Security

What You Need to Know About Tampering
ReversingGlass

What You Need to Know About Tampering

Development Secrets: Shhhh... It's a Secret
ReversingGlass

Development Secrets: Shhhh... It's a Secret

The State of SSCS 2024: It's a Big Deal
ReversingGlass

The State of SSCS 2024: It's a Big Deal

ReversingGlass: ESF calls for software package final exams
ReversingGlass

ReversingGlass: ESF calls for software package final exams

ReversingGlass: Binary Analysis for SSCS
ReversingGlass

ReversingGlass: Binary Analysis for SSCS

Threat modeling meets the SBOM: Why continuous is key
Video

Threat modeling meets the SBOM: Why continuous is key

ReversingGlass: EO on AI: What security teams need to know
Artificial Intelligence (AI)/Machine Learning (ML)

ReversingGlass: EO on AI: What security teams need to know

ReversingGlass: Software Supply Chain Attacks How vs. What
ReversingGlass

ReversingGlass: Software Supply Chain Attacks How vs. What

ReversingGlass: NIST CSF 2.0
ReversingGlass

ReversingGlass: NIST CSF 2.0

ReversingGlass: EPSS 3.0 + CVSS: Why Prioritizing Software Risk is Key
ReversingGlass

ReversingGlass: EPSS 3.0 + CVSS: Why Prioritizing Software Risk is Key

ReversingGlass: Happy Birthday, ReversingGlass
ReversingGlass

ReversingGlass: Happy Birthday, ReversingGlass

ReversingGlass: How Software Supply Chains Go Wrong
ReversingGlass

ReversingGlass: How Software Supply Chains Go Wrong

ReversingGlass: CISA SBD/SBD is HARD
ReversingGlass

ReversingGlass: CISA SBD/SBD is HARD

ReversingGlass: Trust must be complete
ReversingGlass

ReversingGlass: Trust must be complete

Why the Time Is Now for SSCS
ReversingGlass

Why the Time Is Now for SSCS

The Differences Between Vulnerabilities and Malware
ReversingGlass

The Differences Between Vulnerabilities and Malware

ReversingGlass: Must See at Black Hat
ReversingGlass

ReversingGlass: Must See at Black Hat

Software Security: Why Trust Matters
ReversingGlass

Software Security: Why Trust Matters

ReversingLabs at Black Hat 2023
ReversingGlass

ReversingLabs at Black Hat 2023

ReversingGlass: Shift Up Your Software Bill of Materials
ReversingGlass

ReversingGlass: Shift Up Your Software Bill of Materials

Forget Shift Left. Shift Up Instead.
ReversingGlass

Forget Shift Left. Shift Up Instead.

ReversingLabs @ InfoSecurity Europe 2023
ReversingGlass

ReversingLabs @ InfoSecurity Europe 2023

Application Hacks vs Software Supply Chain Hacks
ReversingGlass

Application Hacks vs Software Supply Chain Hacks

Behaviors and Diffs: Better Together for Software Security
ReversingGlass

Behaviors and Diffs: Better Together for Software Security

Reversing Glass on ReversingLabs
ReversingGlass

Reversing Glass on ReversingLabs

AI and Application Security: Proceed with Caution
Artificial Intelligence (AI)/Machine Learning (ML)

AI and Application Security: Proceed with Caution

What the heck is a Software Bill of Materials?
ReversingGlass

What the heck is a Software Bill of Materials?

Supply Chain Risks in Art and Life ... Even the 'The Simpsons'
ReversingGlass

Supply Chain Risks in Art and Life ... Even the 'The Simpsons'

Why CISA Secure by Design is Just a Starting Point
ReversingGlass

Why CISA Secure by Design is Just a Starting Point

ReversingLabs at RSA 2023 | ReversingGlass
ReversingGlass

ReversingLabs at RSA 2023 | ReversingGlass

SSCS Use Cases Are Growing
ReversingGlass

SSCS Use Cases Are Growing

Full-Coverage Supply Chain Security Explained
ReversingGlass

Full-Coverage Supply Chain Security Explained

How to Define Software Supply Chain Security
ReversingGlass

How to Define Software Supply Chain Security

Get Smart With Your Software Supply Chain Security
ReversingGlass

Get Smart With Your Software Supply Chain Security

The DNA of Software Supply Chain Security
ReversingGlass

The DNA of Software Supply Chain Security

A Brief History of App Sec: Why Software Supply Chain Security Is Now
ReversingGlass

A Brief History of App Sec: Why Software Supply Chain Security Is Now

C-SCRM: Much-needed definition for software supply chain policy & processes
ReversingGlass

C-SCRM: Much-needed definition for software supply chain policy & processes

ReversingLabs vs VirusTotal
ReversingGlass

ReversingLabs vs VirusTotal

SCA Is Good. SSCS Is Better.
ReversingGlass

SCA Is Good. SSCS Is Better.

Typosquatting and software supply chain security
ReversingGlass

Typosquatting and software supply chain security

What the heck are secrets?
ReversingGlass

What the heck are secrets?

What is Software Supply Chain Security Scanning
ReversingGlass

What is Software Supply Chain Security Scanning

CircleCI Hack & Software Supply Chain Risks
ReversingGlass

CircleCI Hack & Software Supply Chain Risks

What is ReversingGlass?
ReversingGlass

What is ReversingGlass?

Beyond the SBOM: Next steps are essential for secure software
ReversingGlass

Beyond the SBOM: Next steps are essential for secure software

DNA of an App: Why Traditional App Sec Testing Misses Modern Threats
ReversingGlass

DNA of an App: Why Traditional App Sec Testing Misses Modern Threats

Executive Order 14028: Securing Software Supply Chains
ReversingGlass

Executive Order 14028: Securing Software Supply Chains

Load more

Subscribe

Sign up now to receive the latest weekly
news from ReversingLabs

Get Started
Request a DEMO

Learn more about how ReversingLabs can help your company reduce attack surface risks with deep software and file threat analysis to speed release and response. 

REQUEST A DEMO