DevSecOps & Supply Chain

Supply chain attacks (SolarWinds, Log4j, XZ Utils) made one thing crystal clear: your dependencies and container images are now the primary attack surface. At SWBC I automated secure supply chain scanning across Snyk, Trivy, Tenable, and Mend (WhiteSource) for thousands of third-party libraries and AWS ECR container images. At Celink I led the full migration…