--- title: Building Community-Driven Security Analysis for Your... description: Beyond Trust: Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis This talk was recorded at NDC Security in Oslo,... canonical: https://daily.dev/posts/building-community-driven-security-analysis-for-your-net-software-supply-chain---niels-tanis-3vrulanub twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis | daily.dev og:description: Beyond Trust: Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis This talk was recorded at NDC Security in Oslo,... og:url: https://daily.dev/posts/building-community-driven-security-analysis-for-your-net-software-supply-chain---niels-tanis-3vrulanub og:image: https://api.daily.dev/og/posts/3vrUlANub.png og:image:alt: Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis **[NDC Conferences](https://daily.dev/sources/ndc)** · 43 min read · 0 upvotes · 0 comments ## Summary Beyond Trust: Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper Attend the next NDC conference near you: https://ndcconferences.com https://ndc-security.com/ Subscribe to our YouTube channel and learn every day: @NDC Follow our Social Media! https://www.facebook.com/ndcconferences https://twitter.com/NDC_Conferences https://www.instagram.com/ndc_conferences #dotnet #security #api #devops In today's development, approximately 80% of our software deployments consist of code written by someone else. Using existing libraries and packages is essential for productivity and avoiding reinventing the wheel, this dependency on third-party code introduces security risks that can be hard to address in a good way. First part of this talk will focus on the challenges of securing our software supply chain, particularly on NuGet package security and the hidden threats lurking within all of our used dependencies. We'll examine how traditional approaches fall short when it comes to identifying planted malware, risky APIs, and other security vulnerabilities embedded deep within the packages we trust. While tools like the OpenSSF Security Scorecard provide valuable metrics, they only scratch the surface of what's needed for comprehensive supply chain security. What if we could go deeper? What if we had detailed analysis of NuGet package contents, automated detection of risky API usage? Join me as I introduce Fennec Labs, a community-focused OSS project designed to help out with how we analyze and secure our software dependencies. I'll demonstrate how this tool enables developers to collaboratively identify security risks, share insights, and make more informed decisions about the NuGet packages they integrate into their applications. Whether you're a security-conscious developer, a DevOps engineer, or someone responsible for maintaining your organization's software supply chain, this session will provide practical insights and tools to help you level up your security game and protect your applications from supply chain attacks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/building-community-driven-security-analysis-for-your-net-software-supply-chain---niels-tanis-3vrulanub) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis","url":"https://daily.dev/posts/building-community-driven-security-analysis-for-your-net-software-supply-chain---niels-tanis-3vrulanub","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/building-community-driven-security-analysis-for-your-net-software-supply-chain---niels-tanis-3vrulanub"},"datePublished":"2026-03-19T12:21:47.165Z","dateModified":"2026-03-19T14:08:49.524Z","description":"Beyond Trust: Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis\n\nThis talk was recorded at NDC Security in Oslo,...","image":"https://i.ytimg.com/vi/aGW8oHM0A08/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/aGW8oHM0A08/sddefault.jpg","isAccessibleForFree":true,"articleSection":"NDC Conferences","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"NDC Conferences","logo":"https://media.daily.dev/image/upload/s--SiIyojEj--/f_auto/v1748760369/logos/ndc","url":"https://daily.dev/sources/ndc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/building-community-driven-security-analysis-for-your-net-software-supply-chain---niels-tanis-3vrulanub","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT43M","video":{"@type":"VideoObject","name":"Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis","description":"Beyond Trust: Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis\n\nThis talk was recorded at NDC Security in Oslo,...","thumbnailUrl":"https://i.ytimg.com/vi/aGW8oHM0A08/sddefault.jpg","uploadDate":"2026-03-19T12:21:47.165Z","duration":"PT43M","url":"https://api.daily.dev/r/3vrUlANub","embedUrl":"https://www.youtube.com/embed/aGW8oHM0A08"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"NDC Conferences","item":"https://daily.dev/sources/ndc"},{"@type":"ListItem","position":3,"name":"Building Community-Driven Security Analysis for Your .NET Software Supply Chain - Niels Tanis"}]} ```