Thijs Feryn
As the Technical Evangelist at Varnish Software, Thijs Feryn focuses on web performance, software scalability, and content delivery. He demonstrates this through presentations, videos, books and blog posts.
Thijs is a published author and wrote Getting Started with Varnish Cache and Varnish 6 by Example. As a public speaker, he has a track record of over 390 presentations in 26 different countries, where he is often praised for his energetic and engaging presentation style.
Montreal 2027 sessions
How artifact firewalls prevent software supply chain attacks
English session - Beginner
The massive increase in supply chain attacks for trusted packages causes serious risks to many organizations. Packages get infected, versions get bumped and malicious code gets rapidly distributed at enormous scale.
In this presentation we’ll take a closer look at how an artifact firewall prevents you from pulling in infected packages by enforcing OSV.dev rules at request time, introducing quarantine windows, and offering an audit trail.
Package manager security: from client to central enforcement
English session - Beginner
Package ecosystems like npm, PyPI, Maven, NuGet and Composer each have controls against software supply chain attacks. We'll compare their capabilities, expose the limits of client-side controls, and show how centralized policies can be enforced at the gate, before they reach the CI/CD pipeline.
We'll cover topics like centralized policy as code, dependency cooldowns, audit trails, OSV rules, and the need for a vendor-neutral artifact firewall.
