Skip to content

Commit 90afada

Browse files
authored
Merge pull request #8 from shiftleftcyber/jason
Adding another blog post from LinkedIn
2 parents 6149613 + 73980fa commit 90afada

3 files changed

Lines changed: 67 additions & 1 deletion

File tree

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
+++
2+
author = "Jason Smith"
3+
title = "'Made in Canada' - in Groceries and in Software 🛒🍁💻"
4+
date = "2025-04-27"
5+
tags = [
6+
"markdown",
7+
"css",
8+
"html",
9+
]
10+
linkedin = "https://www.linkedin.com/posts/j28smith_product-of-canada-vs-made-in-canada-activity-7315682416231096320-vusd"
11+
image = "img/thirdparty/made-in-vs-product-of-canada.png"
12+
youtube = "pApbYrNuAg4"
13+
+++
14+
15+
With 🇺🇸 U.S.-imposed tariffs back in the news, many Canadians 🇨🇦 are shifting their focus to buy local and support Canadian-made products. But here's the catch: what does "Made in Canada" actually mean? 🤔
16+
17+
Flip over any grocery item and you’ll see all kinds of labels:
18+
19+
* 🇨🇦 Product of Canada
20+
* 🛠️ Made in Canada
21+
* 📦 Packaged in Canada
22+
* 🌍 Made with domestic and imported ingredients
23+
* 👨‍🍳 Prepared in Canada
24+
25+
The reality? Even with a "Made in Canada" label, ingredients often come from around the world 🌍.
26+
27+
Sound familiar? It should - and software is no different. 💻
28+
29+
Modern software is assembled, not handcrafted 🛠️ - just like hardware. When you manufacture a physical product, you need a Bill of Materials (BOM) to track every screw, chip, and wire 🔩⚙️🔌.
30+
31+
Software is no different. You need to track:
32+
33+
* 🏛️ Third-party libraries
34+
* 🌎 Open-source packages
35+
* 👩🏻‍💻 Proprietary code
36+
* ⚙️ Software build tools
37+
38+
Even if your team "built it", much of it came from a global supply chain 🌎.
39+
40+
And just like with food, we need transparency in what we are consuming 🍲 - or shipping 🚢.
41+
42+
Knowing what's in your software helps you manage:
43+
44+
* 🔐 Security
45+
* 💎 Quality
46+
* 📈 Performance
47+
* ⚠️ Risk
48+
49+
That's where a Software Bill of Materials (SBOM) comes in - your blueprint for understanding what's inside your software. 📝
50+
51+
SBOMs are a great start to gain transparency. However, visibility alone isn’t enough. Can you trust what you see? 🕵
52+
53+
Have you checked the ingredients in your software lately? Do you know where they came from?
54+
55+
hashtag#SBOM hashtag#SoftwareSupplyChain hashtag#CyberSecurity hashtag#SoftwareTransparency hashtag#MadeInCanada hashtag#DigitalSupplyChain hashtag#SoftwareRisk hashtag#TrustButVerify hashtag#DigitalTrust hashtag#OpenSourceSecurity hashtag#SecureDevelopment hashtag#DevSecOps hashtag#SoftwareIntegrity hashtag#CanadianTech hashtag#TechMadeInCanada 🍁💻🔐

marketing/layouts/blog/single.html

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,18 @@ <h4 class="flex flex-row items-center"><span class="fa-solid fa-user text-2xl mr
3131
</div>
3232
{{ end }}
3333
</section>
34-
{{ if .Params.image }}
34+
{{ if .Params.youtube }}
35+
<div class="my-4 aspect-video">
36+
<iframe
37+
src="https://www.youtube.com/embed/{{ .Params.youtube }}"
38+
title="YouTube video"
39+
allowfullscreen
40+
class="w-full h-full rounded-md border"
41+
frameborder="0"
42+
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
43+
></iframe>
44+
</div>
45+
{{ else if .Params.image }}
3546
<img class="my-4" src="{{ .Params.image | absURL }}">
3647
{{ end }}
3748
<div class="content prose md:prose-lg lg:prose-xl max-w-none py-1">{{.Content}}</div>
2.71 MB
Loading

0 commit comments

Comments
 (0)