Trust at AI Speed

AI-assisted development, open-source dependencies and tightening regulations are reshaping software supply chain security. This talk explains how organisations can secure proprietary software, OSS and internal applications across SCM, CI/CD pipelines, package ecosystems and execution platforms. It covers practical controls including SBOMs, attestations, code signing and build pipeline integrity, while highlighting current standards, regulatory drivers such as NIS and CRA, and remaining gaps. A key focus is the shift from manual, human-in-the-loop signing to human-on-the-loop governance: policy-driven enforcement that scales with AI-speed code generation while preserving trust, auditability and resilience.

Biography

Florian Lukavsky is Chief Innovation Officer at SignPath and has been active in offensive security for more than 15 years. As an ethical hacker, he has responsibly disclosed numerous zero-day vulnerabilities to vendors and conducted several hundred penetration tests and security reviews of IoT devices. Today, his focus is on securing software supply chains. At SignPath, he develops solutions that integrate Zero Trust principles into the software development process and help organizations effectively prevent supply chain attacks.