The question is for Steve Springett, in regards to Software Composition Analysis / Software Supply Chain and OWASP Dependency Track.FOLLOW OUR SOCIAL MEDIA: ➜Twitter: <a href='https://twitter.com/AppSecPodcast'>@AppSecPodcast</a> ➜LinkedIn:<a href='https://www.linkedin.com/showcase/83990241'> The Application Security Podcast</a> ➜YouTube: <a href='https://www.youtube.com/channel/UCfrTGqjSsFCQW4k6TueuY-A'>https://www.youtube.com/@ApplicationSecurityPodcast</a> Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Steve Springett — An insiders checklist for Software Composition Analysis

Chris Romeo and Robert Hurlbut dig into the tips, tricks, projects, and tactics that make various application security professionals successful. They cover all facets of application security, from threat modeling and OWASP to DevOps+security and security champions. They approach these stories in an educational light, explaining the details in a way those new to the discipline can understand. Chris Romeo is the CEO of Devici and a General Partner at Kerr Ventures, and Robert Hurlbut is a Principal Application Security Architect focused on Threat Modeling at Aquia.