Software Supply Chain Security: Full Course, Explained Through a Restaurant
A complete Software Supply Chain Security course in 12 lessons, free on YouTube. Every idea is explained through a restaurant, so the concepts stick without memorizing.
Lessons
- 0:00 Lesson 0: Why Supply Chain Attacks Work
- 13:32 Lesson 1: Open Source Dependencies
- 26:33 Lesson 2: Malicious Packages
- 41:02 Lesson 3: What an SBOM Is
- 54:34 Lesson 4: SBOMs in Practice
- 1:08:39 Lesson 5: Fixing What Matters First
- 1:23:08 Lesson 6: VEX, Are We Affected
- 1:37:16 Lesson 7: Build Integrity and SLSA
- 1:50:55 Lesson 8: Signing Code and Images
- 2:04:10 Lesson 9: Securing CI/CD Pipelines
- 2:18:58 Lesson 10: Rules and Frameworks
- 2:33:21 Lesson 11: What to Do Monday
More courses and explainers on the Taistek YouTube channel. New videos every week.
Free download: get my SOC 2 checklist, study guides and ISO 27001 templates at taistek.com/free-resources.
Support the channel
All my courses are free. If this one helped you pass an exam, land a job or get through an audit, a small tip helps me keep making them.
