What is the Software Supply Chain (Really)? | Open Source Open Mic, Ep. 1

What is a software supply chain—and why should you care? In this first episode of Open Source Open Mic, Sonatype’s Andrew Garrett sits down with SVP of Product Tyler Warden to break down the fundamentals of the software supply chain, how it compares to traditional supply chains, and where things can go wrong. They cover real-world risks like vulnerabilities vs. open source malware, the growing impact of AI, and who truly owns supply chain security. Plus, practical advice for teams looking to improve their DevSecOps practices and stay ahead of evolving regulations. If you build, secure, or manage software, this is a must-watch. Subscribe for more conversations on open source security and software supply chain trends.