Open Source SecurityCon North America 2025
2025-11-10
Atlanta, United States
as the organisers put it
Open Source SecurityCon North America 2025 has officially wrapped! Thank you to all the attendees who joined us. Watch keynotes and all breakout sessions on the CNCF YouTube Channel.
who it's for
open source maintainers, security engineers, platform engineers, devops engineers, software supply chain engineers, OSPO staff, site reliability engineers
topics
model signing with SBOMs and SPDX 3.1; short-lived tokens via OIDC federation; SPIRE at scale and TPM attestation; end-to-end SLSA provenance implementations; storage strategies for source attestations; OpenSSF Security Baseline adoption and mapping; Git and repository security with SLSA and Gittuf; Kubernetes threat modeling and runtime policy; automating policy with OSCAL and AMPEL; confidential computing and platform attestations; container image governance and admission controllers
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks | John Kjell, Marina Moore | 07m |
Welcome notes outline logistics and community work: three simultaneous rooms, lunch at Hall B1, reception at 5:30, sponsors Changard Docker Red Hat Minimus… | ||
| Trust, Track, and Verify: Securing AI Pipelines End-to-End | Adolfo Garcia, Jun (Victor) Lu | 23m |
A live demo shows a pet-behavior classifier that is poisoned, then protected end-to-end by an SPDX 3.1 sbom that encodes dataset lineage and hashes plus model… | ||
| Breaking Up with Long-lived Secrets: Secure Automation in the Mode... | Billy Lynch | 05m |
Long‑lived pipeline credentials remain an Achilles’ heel; replacing them with short‑lived, context‑bound tokens issued via OIDC federation lets CI systems… | ||
| The Long Arc of Digital Rights: Securing our Open Source Future | Emily Fox | 05m |
Open source faces concrete shifts: new rules like the Cyber Resilience Act and the claim that digital sovereignty is an evolution of zero trust. Confidential… | ||
| From Adoption to Innovation: LinkedIn’s SPIRE Journey | Junyuan Zeng, Wei Zhang | 26m |
LinkedIn runs SPIRE to issue X.509 identities for hundreds of thousands of hosts and workloads, deploying regional SPIRE clusters that support 50k nodes per… | ||
| How Secure Is Academic Open Source? Insights From the UC OSPO Network | Juanita Gomez | 25m |
Builds a UC-wide GitHub dataset of ~52,000 repos (≈25,000 predicted UC-affiliated), runs OpenSSF Scorecards and dependency/CI analyses, and finds a mean… | ||
| Spice Check: Building an E2E SLSA Implementation | Adolfo García Veytia | 23m |
An end to end SLSA implementation uses the AMPEL policy engine and the new SLSA 1.2 source track to enforce policies from commit to release: reusable GitHub… | ||
| Achieving Positive Outcomes Across Ecosystems: Security Audits in Action | Amir Montazery | |
OSTIF, a 10-year nonprofit, describes a four-plus year CNCF collaboration that runs 37 audits focused on deep source review and threat modeling rather than… | ||
| Dirty Dancing - Untrustworthy SLSA Build Provenance | John Kjell | 23m |
Asserts that SLSA Level 3 provenance can be misleading, using slsa-github-generator plus GitHub Actions, sigstore/cosign, OCI.fyi and GitHub attestation to… | ||
| We're All Consumers (And That's Dandy) | Evan Anderson | 29m |
OpenSSF Security Baseline lays out concrete checks and three maturity levels (level one through three) tied to real requirements: EU Cyber Resilience Act… | ||
| Balancing Developer Fre... | Adrian Mouat, Cat Morris, Gaurav Saxena, Marcus Eagan, Alex Zenla | 32m |
Describes concrete fixes for container sprawl and CVE load: standardizing base images, generating software bill of materials for every artifact, and using… | ||
| Turn Down That Noise: Why the OpenSSF Security Baseline Is Good for Maintainers | Christopher R Robinson, Jennifer Power, Ben Cotton, Stephen Augustus, Evan Anderson | 29m |
OpenSSF Security Baseline lays out under 50 requirements across eight areas, maps them to laws like the EU CRA, NIST SSDF, DORA and NIS2, and defines three… | ||
| Driving Policy To Secure the Open Source Ecosystem | Jack Cable | 27m |
Recap of concrete outcomes: Congress drafts the Securing Open Source Software Act but it stalls, CISA publishes a secure by design white paper and an… | ||
| It's Not a Best Practice If No One Can Follow It: Learning From... | Alex Zenla, John Morello | 28m |
History of Twistlock-style defenses—vulnerability scanning, runtime protection, container-level microsegmentation—and why teams still flail on policy and… | ||
| SAFE-MCP: A Security Framework for AI+MCP (Model Context Protocol) | Frederick Kautz | 22m |
SAFE-MCP presents a model-specific security catalog that maps 65 attack techniques across 14 tactics and documents real incidents and research from Equixly… | ||
| OSCAL in Action: Real World Examples of Automating Policy & Comp... | Jennifer Power, Hannah Braswell | 22m |
Practical pipeline that turns OSCAL assessment plans into enforceable policy as code: OSCAL Compass C2P v2 translates requirements into Open Policy Agent Rego… | ||
| Securing Cloud-Native Workloads from the Metal Up | Tyler Schade | 28m |
Shows a concrete on‑prem identity bootstrapping: physical TPMs plus TPM EK/AK credential activation are used to prove each server’s unique identity, with a… | ||
| What Doesn’t Kill You Makes You Stronger: The Vulnerabilities Th... | Dor Serero, Michael Katchinskiy | 27m |
Five concrete Kubernetes failures get decoded: an API-aggregation upgrade tunnel authentication bypass that lets proxied requests skip auth, a RBAC/CRD scope… | ||
| AIxCC Results and New Open Source AI Projects To Help Secure Open Sou... | Jeff Diecks | 11m |
DARPA and ARPA-H’s two-year AIxCC competition produces seven open-source cyber reasoning systems; finals scan 54+ million lines, find 86% of synthetic bugs and… | ||
| Moving Academia Toward Practice Through Accreditation | Justin Cappos | 16m |
A joint CNCF/OpenSSF accreditation program defines 10 topic areas (cloud fundamentals and software supply chain security), requires a 7–10 page application, a… | ||
| Multi-messenger Security: Adaptive Kubernetes SOC... | Constanze Roedig, Ben Hirschberg, Dom Delnano | 25m |
An adaptive, node-local Kubernetes SOC is built from Kubescape node agent for behavior profiles, Pixie live-compiled eBPF probes for edge compute and on‑demand… | ||
| OSPS Baseline: Improving Your Project Security the Easy Way | Ben Cotton | 25m |
Open Source Project Security (OSPS) Baseline presents a catalog of 40–50 controls organized into three levels (1–3) that map to regulatory frameworks (CRA… | ||
| The Whole Is Greater Than the Sum of Its Parts: A Case for Inte... | Hayden Blauzvern, Marcela Melara | 23m |
Argues that supply chain security tools like in-toto, DSSE, Sigstore and SLSA work best together but fail to interoperate because of overlapping formats and… | ||
| Applying DevSecOps Lessons To MLSecOps | Sarah Evans | 15m |
An openSSF white paper (~40 pages) lays out a layered reference architecture that unwraps the ML infinity loop into data, model and ops wheels, maps the OASP… | ||
| Transparency Exchange API: Where To Find Product SBOM? | Pavel Shukhman | 23m |
TEA proposes a decentralized, API-first way to discover product SBOMs and related artifacts, aiming for ECMA then ISO standardization. It maps products →… | ||
| You Can Sign It, But Can You Trust It? Securing the Compilation Process | Yaxuan(Alice) Wen | 18m |
Compiles are enclosed inside an Intel SGX enclave that runs a tiny WebAssembly runtime, redirects all syscalls to an in‑memory filesystem via a… | ||
| The State of Git Security With SLSA and Gittuf | Patrick Zielinski, Aditya Sirish A Yelgundhalli | 24m |
Demonstrates concrete tooling and results: GitHub embeds policy metadata into git so anyone with read access can verify compliance, the demo generates 126… | ||
| Threat Modeling for Kubernetes: Enhancing Security Posture in Complex and Regulat... | Maxime Coquerel | 31m |
Proposes an experimental RAG pipeline that generates Kubernetes threat models from a knowledge base of CIS benchmarks, prior models and security reviews, using… | ||
| Who Let the Agents Out? Securing AI Workflows the Right Way | Mariusz Sabath, Maia Iyer | 25m |
A cloud-native agent platform assigns short-lived, user-tied identities to agents using SPIRE/SPIFFE SVIDs, performs OAuth token exchange via Keycloak to mint… | ||
| Baking a Security Community From Scratch | Helen Woeste | 14m |
OSTIF spends a year turning security audits into an active community by following repeatable steps: work backwards from a clear goal, find willing… | ||
| Federate, Scale, and Secure: Practical SPIFFE/SPIRE for Containers... | Anjali Telang | 19m |
SPIFFE/SPIRE issues short-lived identities (X.509 and JWT-SVIDs) and scales by using nested spire (intermediate CAs per cluster) and one-way federated spire… | ||
| Where Should Source Attestations Live? Exploring Storage Strategies | Billy Lynch | 11m |
Compares three concrete storage patterns for SLSA source attestations: keep attestations inside the git repo using Git notes / ref attestations, push them to… | ||
| Closing Remarks | John Kjell, Marina Moore | 02m |
Conference returns after a pause and highlights cross‑track learning and community rebuilding, with three diamond sponsors: Changard, Docker, Red Hat, plus… | ||
| Rethinking the Software Supply Chain: Trust, Minimalism, and Resili... | M. Donovan | 06m |
Containers on Docker Hub exceed 20 billion image pulls per month across 14 million images and the claim is that minimal, policy‑enforced builds cut risk… | ||
| In AI We Trust? Securing the Future, One Agent at a Time | Lin Sun, Eitan Yarmush, Ricardo Aravena, Hannah Foxwell | 40m |
Core cloud‑native controls apply but require extension: examples include using workload identity and JWT delegation (an RFC exists), enforcing zero trust is… | ||
| nothing matches | ||