<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=1076912843267184&amp;ev=PageView&amp;noscript=1">
The Buyer’s Guide to Software Supply Chain Security
Download Now!
Breaking Down NIST CSF 2.0 with NIST | Earn CPEs
Register Now
Gartner® Report: Mitigate Enterprise Software Supply Chain Risks
Get the Insights

What is Software Supply Chain Security Scanning?

01/19/2023

In this lesson, Matt explains why it is essential to integrate automatic software supply chain security scanning into the traditional DevOps process.

Keep learning

• SBOMs are critical — but only the first step
• Special: The State of Supply Chain Security
• Get a free SBOM and supply chain risk analysis

Matt Rose

About Author: Matt Rose

Field CISO at ReversingLabs. Matt Rose has an extensive background in application security, object-oriented programming, multi-tier architecture design and implementation, and internet/intranet development. His areas of expertise include Application Security, SAST, DAST, IAST, SCA, DevSecOps, and Threat Modeling. Matt is an accomplished public speaker and has been quoted in 50+ AST industry media publications.

Related episodes

Reproducible Builds: Graduate Your Software Supply Chain Security
ReversingGlass

Reproducible Builds: Graduate Your Software Supply Chain Security

Tampering: Software Supply Chain Security in a Nutshell
ReversingGlass

Tampering: Software Supply Chain Security in a Nutshell

Development Secrets: Shhhh... It's a Secret
ReversingGlass

Development Secrets: Shhhh... It's a Secret

The State of Software Supply Chain Security 2024: It's a Big Deal
ReversingGlass

The State of Software Supply Chain Security 2024: It's a Big Deal

ReversingGlass: ESF calls for software package final exams
ReversingGlass

ReversingGlass: ESF calls for software package final exams

ReversingGlass: Binary Analysis
ReversingGlass

ReversingGlass: Binary Analysis

ReversingGlass: SBOMS and threat modeling
ReversingGlass

ReversingGlass: SBOMS and threat modeling

ReversingGlass: EO on AI: What security teams need to know
Artificial Intelligence (AI)/Machine Learning (ML)

ReversingGlass: EO on AI: What security teams need to know

ReversingGlass: Software Supply Chain Attacks How vs. What
ReversingGlass

ReversingGlass: Software Supply Chain Attacks How vs. What

ReversingGlass: NIST CSF 2.0
ReversingGlass

ReversingGlass: NIST CSF 2.0

ReversingGlass: EPSS 3.0 + CVSS: Why Prioritizing Software Risk is Key
ReversingGlass

ReversingGlass: EPSS 3.0 + CVSS: Why Prioritizing Software Risk is Key

ReversingGlass: Happy Birthday, ReversingGlass
ReversingGlass

ReversingGlass: Happy Birthday, ReversingGlass

ReversingGlass: How Software Supply Chains Go Wrong
ReversingGlass

ReversingGlass: How Software Supply Chains Go Wrong

ReversingGlass: CISA SBD/SBD is HARD
ReversingGlass

ReversingGlass: CISA SBD/SBD is HARD

ReversingGlass: Trust must be complete
ReversingGlass

ReversingGlass: Trust must be complete

ReversingGlass: Why the time is NOW for Software Supply Chain Security
ReversingGlass

ReversingGlass: Why the time is NOW for Software Supply Chain Security

ReversingGlass: Software Supply Chain Security: Vulns & Malware
ReversingGlass

ReversingGlass: Software Supply Chain Security: Vulns & Malware

ReversingGlass: Must See at Black Hat
ReversingGlass

ReversingGlass: Must See at Black Hat

ReversingGlass: Trust and Software Supply Chain Security
ReversingGlass

ReversingGlass: Trust and Software Supply Chain Security

ReversingLabs at Black Hat 2023
ReversingGlass

ReversingLabs at Black Hat 2023

Shift Up Your SBOM
ReversingGlass

Shift Up Your SBOM

Software Supply Chain Security = Shift UP
ReversingGlass

Software Supply Chain Security = Shift UP

ReversingLabs @ InfoSecurity Europe 2023
ReversingGlass

ReversingLabs @ InfoSecurity Europe 2023

Application Hacks vs Software Supply Chain Hacks
ReversingGlass

Application Hacks vs Software Supply Chain Hacks

Behaviors & Diffs: Better Together for Software Supply Chain Security
ReversingGlass

Behaviors & Diffs: Better Together for Software Supply Chain Security

Who is ReversingLabs?
ReversingGlass

Who is ReversingLabs?

AI and Software Supply Chain Security: Proceed with Caution
Artificial Intelligence (AI)/Machine Learning (ML)

AI and Software Supply Chain Security: Proceed with Caution

What the heck is an SBOM?
ReversingGlass

What the heck is an SBOM?

Supply Chain Risks in Art and Life ... Even the 'The Simpsons'
ReversingGlass

Supply Chain Risks in Art and Life ... Even the 'The Simpsons'

Why CISA Secure by Design is Just a Starting Point
ReversingGlass

Why CISA Secure by Design is Just a Starting Point

ReversingLabs at RSA 2023 | ReversingGlass
ReversingGlass

ReversingLabs at RSA 2023 | ReversingGlass

Software Supply Chain Security Use Cases
ReversingGlass

Software Supply Chain Security Use Cases

Full-Coverage Software Supply Chain Security Explained
ReversingGlass

Full-Coverage Software Supply Chain Security Explained

How to Define Software Supply Chain Security
ReversingGlass

How to Define Software Supply Chain Security

Get Smart With Your Software Supply Chain Security
ReversingGlass

Get Smart With Your Software Supply Chain Security

The DNA of Software Supply Chain Security
ReversingGlass

The DNA of Software Supply Chain Security

A Brief History of App Sec: Why Software Supply Chain Security Is Now
ReversingGlass

A Brief History of App Sec: Why Software Supply Chain Security Is Now

C-SCRM: Much-needed definition for software supply chain policy & processes
ReversingGlass

C-SCRM: Much-needed definition for software supply chain policy & processes

ReversingLabs vs VirusTotal
ReversingGlass

ReversingLabs vs VirusTotal

SCA is good. Software Supply Chain Security is better
ReversingGlass

SCA is good. Software Supply Chain Security is better

Typosquatting and software supply chain security
ReversingGlass

Typosquatting and software supply chain security

What the heck are secrets?
ReversingGlass

What the heck are secrets?

What is Software Supply Chain Security Scanning
ReversingGlass

What is Software Supply Chain Security Scanning

CircleCI Hack & Software Supply Chain Risks
ReversingGlass

CircleCI Hack & Software Supply Chain Risks

What is ReversingGlass?
ReversingGlass

What is ReversingGlass?

Beyond the SBOM: Next steps are essential for secure software
ReversingGlass

Beyond the SBOM: Next steps are essential for secure software

DNA of an App: Why Traditional App Sec Testing Misses Modern Threats
ReversingGlass

DNA of an App: Why Traditional App Sec Testing Misses Modern Threats

EO 14028: Securing the software supply chain with an SBOM
ReversingGlass

EO 14028: Securing the software supply chain with an SBOM

Load more

Subscribe

Sign up now to receive the latest weekly
news from ReversingLabs

Get Started
Request a DEMO

Learn more about how ReversingLabs can help your company reduce attack surface risks with deep software and file threat analysis to speed release and response. 

REQUEST A DEMO