Snyk’s annual State of Open Source Security Report 2020 is here and it is no surprise to find that the open source ecosystem grew by 110%, spanning over 1.3m packages. As development ecosystems grow increasingly dependent upon third-party libraries and packages – how well is open source security keeping up? In this DevSecOps panel, Snyk is teaming up with Docker to discuss the recent findings in the State of Open Source Security Report 2020 and key takeaways to improve open source security throughout the delivery pipeline. Tune in to learn more about the real-world project impacts of the most commonly discovered vulnerabilities, security challenges in container infrastructure, and cultural shifts in DevSecOps organizations. Key findings include: Almost 40% of organizations have no automated security testing capabilities 47% of organizations have not implemented programs to increase collaboration between development and security teams Only 1/3 of open source vulnerabilities are fixed under 20 days

1. A Panel Discussion
confidential
The State of Open Source Security
in DevSecops Pipelines

2. Agenda
Introductions
Who is securing your software?
Vulnerability reports vs impact
Securing container images
Open Q&A
confidential

3. Introductions
Alyssa Miller
Application Security
Advocate at Snyk
Justin Cormack
Security Lead at Docker, Inc.
Ilan Rabinovitch
VP Product & Community at
Datadog

4. Security Responsibility 2019 vs 2020

5. Vulnerability Reports vs Impact

6. Building Secure Containers

7. Questions?