<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>InfoQ - Continuous Integration - Podcasts</title>
    <link>https://www.infoq.com</link>
    <description>InfoQ Continuous Integration Podcasts feed</description>
    <item>
      <title>Podcast: The Hidden Vulnerability of the Open Source Software Supply Chain: the Underlying Infrastructure</title>
      <link>https://www.infoq.com/podcasts/open-source-software-supply-chain/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=Continuous+Integration-podcasts</link>
      <description>&lt;img src="https://res.infoq.com/podcasts/open-source-software-supply-chain/en/smallimage/the-infoq-podcast-logo-thumbnail-500-1758721714264.jpg"/&gt;&lt;p&gt;Software supply chain veteran Brian Fox unpacks the security implications of the new EU Cyber Resilience Act and its profound impact on open-source projects. He reveals the hidden infrastructure risks threatening open-source projects and shares insights for senior software leaders navigating this regulatory landscape.&lt;/p&gt; &lt;i&gt;By Brian Fox&lt;/i&gt;</description>
      <category>Maven</category>
      <category>Java</category>
      <category>The InfoQ Podcast</category>
      <category>Open Source</category>
      <category>Software Supply Chain</category>
      <category>Development</category>
      <category>podcast</category>
      <pubDate>Mon, 29 Sep 2025 11:00:00 GMT</pubDate>
      <guid>https://www.infoq.com/podcasts/open-source-software-supply-chain/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=Continuous+Integration-podcasts</guid>
      <dc:creator>Brian Fox</dc:creator>
      <dc:date>2025-09-29T11:00:00Z</dc:date>
      <dc:identifier>/podcasts/open-source-software-supply-chain/en</dc:identifier>
    </item>
  </channel>
</rss>
