Building an Open Source Chain of Trust: New Research Uncovers Key Blockers and Ways Forward
Ubuntu, Monday, July 6th, 2026
Canonical research on 500 DevOps pros finds fragmented processes and poor collaboration undermine software supply chain security.
Canonical surveyed 500 DevOps professionals about open source software supply chains and found that while organizations are adopting security tools and formal policies, fragmented processes and weak cross-team collaboration remain major obstacles.
Key challenges include manual security reviews, vulnerability-tracking delays from compatibility concerns and staffing shortages, and friction between development and platform engineering teams.
The research recommends treating the operating system as a strategic control layer, implementing verifiable provenance tracking, and strengthening team collaboration. Together these steps help organizations better manage open source dependencies and reduce security risk.