Logo Voxxed Days

Three Things That Each Developer Should Know to Help Secure Your Code Base

Olimpiu Pop

Olimpiu is a technology executive, who balances his tech savviness with a focus on people and their wellbeing. A constant explorer of new technology trends, he enjoys digesting and spreading knowledge through podcasts or written articles. He is a strong believer in the power of communities and open source, getting involved in technical community building and curating content for conferences as program committee.

Even though he started working with Java in the days of the 1.4 JDK, lately he explored other ecosystems like JS and Go continuously trying to learn other languages and paradigms.

You can follow him on LinkedIn and @olimpiupop for ramblings on technology, cybersecurity and classical music.

You can find content curated or written by him on JavaAdvent and InfoQ. For the daily dose of cybersecurity and open source 505updates.com.

Olimpiu Pop


The cost of cybercrime is increasing at a staggering rate, poised to almost equal US GDP by 2027. Cybercrime syndicates are becoming more and more professional with really elaborate scams to get your data and money. One of the latest trends in the weaponisation of open-source and the poisoning of real repositories to infect real software.

In order to ensure a safer ecosystem and that our supply chain is protected, we can take advantage of the latest developments:

  • SBOM – for transparency for both our dependencies and dependents
  • Reproducible Builds – for having the mechanisms to double-check the builds we use
  • SigStore – the new development in terms of signing builds.

During the current presentation, we will give an update related to the state of the threats, especially with the latest development related to the war in Ukraine. In the second part, we will dive into the solutions provided by each of the mentioned points and how they fit into the picture of hardening the supply chain.

Based on real-world examples, focused on automation and alerts at scale.

Tools like Syft, Bomber, Grype and Sonatype BOM Doctor will be used.

Stay up to date

* indicates required

We use Mailchimp as our marketing platform. By clicking above to subscribe, you acknowledge that your information will be transferred to Mailchimp for processing. Learn more about Mailchimp's privacy practices here.

You can change your mind at any time by clicking the unsubscribe link in the footer of any email you receive from us, or by contacting us at [email protected]