Carahsoft, in conjunction with its vendor partners, sponsors hundreds of events each year, ranging from webcasts and tradeshows to executive roundtables and technology forums.

Government Events and Resources

Events

Anaconda-microsite.png
Anaconda

Rising Threat: Securing Your Open-Source Software Pipeline


Event Date: May 25, 2022
Hosted By: Anaconda & Carahsoft

The use of open-source software (OSS) has continued to grow in recent years, enabling rapid innovation and solution development. Unfortunately, as OSS use has increased, so have software supply chain attacks.

Anaconda provides tools to secure open-source pipelines that enables agencies to reduce vulnerability risk, manage dependencies and adhere to data and software governance requirements.

Anaconda hosted its Rising Threat webinar on Wednesday, May 25, 2022 where attendees had the opportunity to hear:

  • Lessons learned from helping secure agencies open-source pipelines
  • Best practices and common pitfalls to avoid
  • The implications of recent regulatory changes related to software supply chain security and how to prepare for the future

Download the on-demand recording and schedule time with experts to learn more about the importance of securing your agency’s open-source pipeline!


Fill out the form below to view this archived event.


Resources


Featured

In this episode of Identiholics, host Christine Owen is joined by Jamie Danker from Venable and Carole House from Terranet. They discuss the importance of women in the cybersecurity field and the need for more women to be involved in privacy and security discussions. The conversation highlights the ...

The discourse around secure mobile communication platforms has escalated in the United States public sector, where security and data integrity aren’t just priorities but mandates. As agencies become increasingly dependent on digital technologies to execute their missions, the need for secure p...

SBOM360 Hub is the tech industry's first SBOM exchange for complex software. The Hub allows publishes to manage, create, publish, and share software that is compliant with SBOMs standards data along the distribution chain. This enables risk reduction and safe transfer of data.

Lineaje Third Party Management (TPRM) provides a solution that reduces the risks in the technology purchased. TPRM analyzes security risks in each device by automatically detecting the security policy violations. Some noticeable capabilities are secure SBOM exchange, Automated Risk Analysis, Auto-up...

Executive order 14028 aims to enhance software supply chain security by updating the requirements. Key requirements of the executive order are SBOM minimum fields based on NTIA specifications, signed self-attestation form, and evidentiary artifacts. This article goes in depth on how each key require...

Government agencies are facing increasing demands to provide services more efficiently, transparently, and with limited resources. To support this transformation, we're thrilled to share that Accela has acquired ePermitHub—marking a significant advancement in streamlining permitting and pl...

During the 2020 pandemic, it highlighted the vulnerabilities the software supply chain has. SBOM360 by Lineaje is the company's first supply chain manager. The Apache Software Foundation (ASF), an open-source provider, shared its extensive findings on the broader open-source world.

Software is under attack by finding a weakness and taking advantages. Taking on these attacks on the supply chain involves different systems to be working simultaneously. A extensive approach is needed in order to handle the full complexity of the problem.

Executive Order 14028 is requiring vendors to now follow new procedures to ensure that the standards stay high. Some major updates are Hi-Fidelity Software Bill of Materials (SBOM), Vulnerability Disclosure Report (VDR), Signed Self-Attestation Letter of Conformance to EO 14028 per Section 4(e), Evi...

This resource provides an overview of EdgeRunner AI, a military-specific AI solution offering capabilities such as offline, multi-step, multi-turn interactions tailored for warfighters. It highlights features like EdgeRunner Athena for document summarization and domain-specific adapters with LoRA fi...