Guest
François is a Senior Product Security Engineer for BoostSecurity, where he leads the Supply Chain research team. With over 10 years of experience in building AppSec programs for large corporations (such as Intel) and small startups he has been in the heat of the action as the DevSecOps movement took shape. He has made numerous Supply Chain responsible disclosures to organizations such as AWS, Google, RedHat, Chainguard, etc. He spoke at various conferences on the topic. François is one of founders of the NorthSec conference in Montreal and was a challenge designer for the NorthSec CTF.
François Proulx shares his discovery of security vulnerabilities in build pipelines. Francois has found that attackers can exploit this often overlooked side of the software supply chain.
Listen to the episodeSoftware supply chain -- how deep does the problem go? François is here to help us realize how deep the rabbit hole of the supply chain is and enlighten us with strategies to get out of the hole.
Listen to the episode