---
title: "Supply Chain Security | Talks On My Machine 2024"
url: "https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/"
lang: "en"
type: "event"
date: "2024-07-16"
lastmod: "2026-10-29"
description: "Watch the Talks On My Machine Supply Chain Security replay: a free online event on the software supply chain with OpenSSF, Sigstore, SBOM, Kyverno, Terraform."
keywords: ["Supply Chain Security","Talks On My Machine","SparkFabrik","OpenSSF","Sigstore","SBOM","Kyverno","Terraform","Kubernetes","GUAC"]
image: "https://www.sparkfabrik.com/images/og/eventi-tomm-supply-chain-security-en.webp"
translations:
  it: "https://www.sparkfabrik.com/it/eventi/tomm-supply-chain-security/index.md"
schema: {"@context":"https://schema.org","@id":"https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/#event","@type":"Event","description":"Watch the Talks On My Machine Supply Chain Security replay: a free online event on the software supply chain with OpenSSF, Sigstore, SBOM, Kyverno, Terraform.","endDate":"2024-07-16T13:00:00+02:00","eventAttendanceMode":"https://schema.org/OnlineEventAttendanceMode","eventStatus":"https://schema.org/EventScheduled","image":"https://www.sparkfabrik.com/images/og/eventi-tomm-supply-chain-security-en.webp","location":{"@type":"VirtualLocation","url":"https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/"},"name":"Supply Chain Security","organizer":{"@id":"https://www.sparkfabrik.com/#organization"},"startDate":"2024-07-16T09:30:00+02:00","url":"https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/"}
---

# Supply Chain Security.

The first Talks On My Machine, on software supply chain security: GUAC, Sigstore and SBOM, Terraform and Kyverno, with OpenSSF experts.

[Supply Chain Security at SparkFabrik](https://www.sparkfabrik.com/en/services/cloud-native-services/supply-chain-security/)

[Watch the replay](https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/#replay)

- Date: Tuesday, July 16, 2024
- Time: 09:30 - 13:00 CEST
- Venue: Online
- Language: Italian (one talk in English)
- Admission: Free

## The event.

This event has ended: July 16, 2024 · Online. [Watch the replay](https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/#replay)

Attacks that come in through dependencies and build tools are more and more frequent: SolarWinds, Log4Shell and Codecov are the best-known examples.

With this event **Talks On My Machine** opened its series. We covered:

- **The most common vulnerabilities**: the most exposed areas of the supply chain and emerging threats
- **Mitigation strategies**: effective security controls and the technologies that automate them
- **Cases and experience**: practical examples and advice from industry experts and OpenSSF members

## The program.

Four talks and audience questions, from 9:30 to 13:00.

- **9:30 - 9:45** Introduction, SparkFabrik: Opening and welcome
- **9:45 - 10:30** Supply Chain Security: A Sandwich that goes well with GUAC, Michael Lieberman: The importance of supply chain security and the suite of tools that compose the solution, including the GUAC project for software supply chain transparency and observability.
- **10:30 - 11:15** Building a Trusted and Resilient Software Supply Chain, Paolo Mainardi: Current state of the Software Supply Chain, significant global events (SolarWinds, log4shell, codecov), and tools like Sigstore, Syft, and Grype for digital signatures and SBOM.
- **11:15 - 12:00** Protecting Terraform-based Infrastructure from Threats, Andrea Panisson: Analysis of Terraform's internal workings, common attacks, and critical security aspects for infrastructure as code.
- **12:00 - 12:45** Unleash Kyverno: Building a Trusted and Resilient Supply Chain on Kubernetes, Giuseppe Arancio: Kyverno as a policy engine for Kubernetes: OCI image validation, SBOM generation, and integration with CI/CD pipelines.
- **12:45 - 12:55** Q&A and Closing, SparkFabrik: Questions and answers with speakers

## Speakers.

Who spoke at the event.

- **Supply Chain Security: A Sandwich that goes well with GUAC**: Michael Lieberman (Co-founder and CTO, Kusari)
  Talk in English, pre-recorded
- **Building a Trusted and Resilient Software Supply Chain**: Paolo Mainardi (Co-founder and CTO, SparkFabrik)
  Pre-recorded talk
- **Protecting Terraform-based Infrastructure from Threats**: Andrea Panisson (Cloud-Native Engineer, SparkFabrik)
- **Unleash Kyverno: Building a Trusted and Resilient Supply Chain on Kubernetes**: Giuseppe Arancio (Cloud-Native Engineer, SparkFabrik)
- **Edoardo Dusi**, DevRel, event MC, SparkFabrik

## Watch the replay.

The full recording on YouTube.

[Watch the replay.](https://www.youtube.com/watch?v=eJkrV5lwg-s)

## The editions.

The series of online events where we share what we learn on projects, told by the people who work on them every day.

- Edition 01: [Supply Chain Security](https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/), July 16, 2024 (This edition)
- Edition 02: [Drupal: Driving Digital Experiences](https://www.sparkfabrik.com/en/events/tomm-drupal-2024/), November 21, 2024 (Replay)
- Edition 03: [Gen AI x Business](https://www.sparkfabrik.com/en/events/tomm-gen-ai-business/), September 19, 2025 (Replay)
- Edition 04: [Drupal x Business](https://www.sparkfabrik.com/en/events/tomm-drupal-2026/), February 13, 2026 (Replay)
- Edition 05: [AI Native Engineering](https://www.sparkfabrik.com/en/events/tomm-ai-native-engineering/), November 13, 2026 (Registration open)

[The whole series](https://www.sparkfabrik.com/en/events/talks-on-my-machine/)

## Bring these topics to your team.

Tell us what you are facing: we will put you in touch with the speakers.

[Tell us about your project](https://www.sparkfabrik.com/en/contact-us/)

- CEO: Stefano Mainardi, [Book 30 minutes](https://calendar.app.google/5N7BejeB8h1HpkYs7)
- CTO: Paolo Mainardi, [Book 30 minutes](https://calendar.app.google/gwe2fWtNU1aL31JCA)

---

*This is the Markdown version of the page, to facilitate reading by AI and crawlers. Visit [https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/](https://www.sparkfabrik.com/en/events/tomm-supply-chain-security/) for the full version with images and interactions.*