Planning - Implementing Open Source Security & Dependency Management

Where should dependency management fit in your software development life cycle?

In this session, Darren Meyer, Lead Solutions Architect at Endor Labs, explains how to integrate open source dependency management into the planning phase of the SDLC, even in fast-moving Agile and continuous delivery environments.

You’ll learn:
- How planning has shifted in modern software development
- Why traditional security planning often gets lost in Agile workflows
- The role of security champions in evaluating dependency and licensing risks
- How to assess open source packages for compliance and operational risk
- Simple ways to create enforceable standards without heavy documentation

Whether you’re building new features or maintaining legacy code, adding structure to how you manage dependencies helps reduce security risk and avoid surprises down the line.

00:00 Introduction to Planning in SDLC
00:12 Traditional vs. Modern Planning Approaches
01:33 Challenges in Modern Planning
02:05 Dependency Management Strategies
02:58 Establishing Standards and Policies
03:59 Licensing and Compliance Considerations
04:16 Conclusion and Best Practices

Learn more:
https://www.leanappsec.com/

Видео Planning - Implementing Open Source Security & Dependency Management канала Endor Labs