India is the second-largest and fastest-growing developer community on GitHub, with over 20 million developers and 30% year-over-year growth. From Aadhaar to UPI to the India Stack, the country has built world-class digital public infrastructure serving over a billion people. But this infrastructure is built on the same global open-source supply chain that is under active attack.

This session examines why software supply chain security matters disproportionately for India as both the world's largest software services exporter and a massive consumer of open-source components. We will walk through recent high-profile supply chain attacks, explain how automated tools like Dependabot protect millions of repositories globally, and discuss what Indian organizations, developers, and policymakers can do to strengthen their supply chain posture. From CERT-In's vulnerability disclosure mandates to the adoption of SBOMs and automated dependency management, this talk provides a roadmap for India's next chapter in cybersecurity.

Format: Session Presentation (30 min) best for OWASP India, NASSCOM events, or India-focused tracks

Level: Introductory