The talk discusses how the open-source tool Sixdoor is tackling supply chain security with a route of trust initiated by Let's Encrypt for software signing artifacts. Cosign ties everything together with a free code signing certificate authority that allows for signing and verifying signatures and creating in-toto attestations. Rugby is used as a comparison with different positions and responsibilities that tie into the overall goal of winning the game, just as Sixdoor ties into improving the supply chain technology we use. The talk also briefly describes the different technologies that Changar supports, such as Tecton, K-native, and OpenSSF.