Skip to content

Commit 73980fa

Browse files
committed
Add the blog post
1 parent a7c17b4 commit 73980fa

1 file changed

Lines changed: 55 additions & 0 deletions

File tree

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
+++
2+
author = "Jason Smith"
3+
title = "'Made in Canada' - in Groceries and in Software πŸ›’πŸπŸ’»"
4+
date = "2025-04-27"
5+
tags = [
6+
"markdown",
7+
"css",
8+
"html",
9+
]
10+
linkedin = "https://www.linkedin.com/posts/j28smith_product-of-canada-vs-made-in-canada-activity-7315682416231096320-vusd"
11+
image = "img/thirdparty/made-in-vs-product-of-canada.png"
12+
youtube = "pApbYrNuAg4"
13+
+++
14+
15+
With πŸ‡ΊπŸ‡Έ U.S.-imposed tariffs back in the news, many Canadians πŸ‡¨πŸ‡¦ are shifting their focus to buy local and support Canadian-made products. But here's the catch: what does "Made in Canada" actually mean? πŸ€”
16+
17+
Flip over any grocery item and you’ll see all kinds of labels:
18+
19+
* πŸ‡¨πŸ‡¦ Product of Canada
20+
* πŸ› οΈ Made in Canada
21+
* πŸ“¦ Packaged in Canada
22+
* 🌍 Made with domestic and imported ingredients
23+
* πŸ‘¨β€πŸ³ Prepared in Canada
24+
25+
The reality? Even with a "Made in Canada" label, ingredients often come from around the world 🌍.
26+
27+
Sound familiar? It should - and software is no different. πŸ’»
28+
29+
Modern software is assembled, not handcrafted πŸ› οΈ - just like hardware. When you manufacture a physical product, you need a Bill of Materials (BOM) to track every screw, chip, and wire πŸ”©βš™οΈπŸ”Œ.
30+
31+
Software is no different. You need to track:
32+
33+
* πŸ›οΈ Third-party libraries
34+
* 🌎 Open-source packages
35+
* πŸ‘©πŸ»β€πŸ’» Proprietary code
36+
* βš™οΈ Software build tools
37+
38+
Even if your team "built it", much of it came from a global supply chain 🌎.
39+
40+
And just like with food, we need transparency in what we are consuming 🍲 - or shipping 🚒.
41+
42+
Knowing what's in your software helps you manage:
43+
44+
* πŸ” Security
45+
* πŸ’Ž Quality
46+
* πŸ“ˆ Performance
47+
* ⚠️ Risk
48+
49+
That's where a Software Bill of Materials (SBOM) comes in - your blueprint for understanding what's inside your software. πŸ“
50+
51+
SBOMs are a great start to gain transparency. However, visibility alone isn’t enough. Can you trust what you see? πŸ•΅
52+
53+
Have you checked the ingredients in your software lately? Do you know where they came from?
54+
55+
hashtag#SBOM hashtag#SoftwareSupplyChain hashtag#CyberSecurity hashtag#SoftwareTransparency hashtag#MadeInCanada hashtag#DigitalSupplyChain hashtag#SoftwareRisk hashtag#TrustButVerify hashtag#DigitalTrust hashtag#OpenSourceSecurity hashtag#SecureDevelopment hashtag#DevSecOps hashtag#SoftwareIntegrity hashtag#CanadianTech hashtag#TechMadeInCanada πŸπŸ’»πŸ”

0 commit comments

Comments
Β (0)