Enhancing Software Supply Chain Security with Open Source Python Tools

Wednesday 17:10 in Hassium

The Cyber Resilience Act (CRA) is aimed at improving the security and resilience of the software components within a digital product. This session will provide a high level overview of the CRA and demonstrate how to enhance software supply chain transparency, manage risks effectively throughout the Software Development Lifecycle (SDLC), and achieve the necessary compliance by leveraging a suite of open-source Python tools.

Key areas to be addressed will include:

Learn how to create comprehensive and high quality SBOMs to gain a clear understanding of all components within your software.
Discover how to identify and mitigate potential risks and threats within the software supply chain throughout the entire SDLC.
Explore effective strategies for identifying, assessing, prioritising and remediating software vulnerabilities.
Understand how to adopt best practices to ensure compliance with relevant regulations and industry standards.

The Python tools/applications to be referenced will include sbom4python, lib4sbom, lib4vex, lib4package, distro2sbom, sbomdiff, sbomaudit and cve-bin-tool.

Anthony Harrison

Anthony Harrison has been developing and delivering mission-critical applications for over 40 years working on various complex programs where he held various roles in software, systems and cyber engineering, as well as providing technical leadership for a number of programmes.

He is the Founder and Director of APH10, and co-founder of SBOM Europe, and is a leading source of expertise in Software Bill of Materials (SBOM). He has been developing open source software actively for a number of years; most recently, the applications have been related to supporting the software supply chain through utilities to generate and analyse software bills of materials (SBOMs).

He has been a mentor for the Google Summer of Code for the past four years via the Python Software Foundation and is a mentor for his local CoderDojo in Manchester teaching students Python.