Adolfo García Veytia
where else to find them
no profile links on file
what they talk about
all 7 in the filters
where they keep going back
- CVE/FIRST VulnCon & Annual CNA Summit2 editions2024–2025
- KubeCon + CloudNativeCon Europe2 editions2022–2025
- KubeCon + CloudNativeCon North America2 editions2021–2022
all 13 in the filters
on a stage with
all 12 in the filters
who talks about the same things
- Dan Lorenc21 talks
- Carlos Panato8 talks
- Matt Jarvis15 talks
- Michael Lieberman36 talks
- Rose Judge8 talks
- John Kjell16 talks
| title | conference | date |
|---|---|---|
| From Mild To Wild: How Hot Can Your SLSA Be? | Open Source SecurityCon Europe 2026 | 2026-03-23 |
Policy shows concrete checks and demos: verify builder identity, build type, source commit and signatures (about 50 checks run for a Red Hat UBI image), then… | ||
| Spice Check: Building an E2E SLSA Implementation | Open Source SecurityCon North America 2025 | 2025-11-10 |
An end to end SLSA implementation uses the AMPEL policy engine and the new SLSA 1.2 source track to enforce policies from commit to release: reusable GitHub… | ||
| Builds You (and Others) Can Trust: Meet the AMPEL Policy Engine | Open Source Summit North America 2025 | 2025-06-23 |
Ampel is an open source policy engine that embeds into CI/CD or a CLI, verifies keyless Sigstore verification and in-toto attestations, and evaluates predicate… | ||
| Practical Software Bill of Materials: From Generation to Distribution Workshop | CVE/FIRST VulnCon 2025 | 2025-04-07 |
SBOMs are generated with Trivy (or Syft), augmented with sbom-azim or a checked-in JSON and jq, then enriched via Parlay(ecosystems) to add licenses, repos and… | ||
| Weaving a VEX Feed Through the Kubernetes Project | CVE/FIRST VulnCon 2025 | 2025-04-07 |
Kubernetes now publishes a machine-readable VEX feed that ties CVEs to specific branches, modules and container images using OpenVEX, created from three… | ||
| Weaving a VEX Feed Through the Kubernetes Project | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Kubernetes publishes a machine-readable VEX feed that combines three sources: maintainer assessments turned into signed OpenVEX attestations via a Vexflow… | ||
| Ace of Base: Meeting the OpenSSF Security Baseline with Minder | SOSS Fusion 2024 | 2024-10-22 |
Minder is an open source security platform now in the OpenSSF sandbox that observes repos, builds and artifacts and reconciles state to a declared desired… | ||
| Finally! Automated End-to-End VEX Streams You Can Trust | SOSS Community Day Europe 2024 | 2024-09-19 |
Claims an end-to-end automated VEX stream by using compiler reachability to generate canonical OpenVEX statements, implemented via govulncheck producing… | ||
| Teach Your SBOM New Tricks with Bomshell | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
bomshell is a CEL-based scripting tool that reads SPDX and CycloneDX (JSON or tag‑value), uses protom as a protom neutral graph IO layer, and runs recipes to… | ||
| Keynote: We’re VEXing the Cloud Native Landscape. Bring Your Code! | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
A practical report on bootstrapping VEX into cloud native workflows: a lightweight OpenVEX feeds format, two spec revisions after testing with three major… | ||
| Panel Discussion: Don’t be Vexed by VEX - VEXperts Panel | CVE/FIRST VulnCon 2024 & Annual CNA Summit | 2024-03-25 |
Panel summarizes where VEX is actually used, what tools exist, and what still breaks: lightweight openVEX JSON‑LD statements and CAF/CSAF profiles are… | ||
| Democratizing Exploitability Data with OpenVEX | CVE/FIRST VulnCon 2024 & Annual CNA Summit | 2024-03-25 |
OpenVEX claims to let maintainers publish artifact-level exploitability statements so scanners stop flagging false positives; it ships a JSON‑LD spec plus… | ||
| Enabling VEX and Full SBOM Coverage with Wolfi Based Containers | SupplyChainSecurityCon @ Open Source Summit Europe 2023 | 2023-09-19 |
Wolfi-based images produce complete SPDX SBOMs including file-level hashes and package provenance, Wolfi advisories feed an automated generator called vaccine… | ||
| Enabling VEX and Full SBOM Coverage with Wolfi Based Containers | Open Source Summit Europe 2023 | 2023-09-19 |
Wolfi-based images ship full SBOM coverage (SPDX per package, file-level hashes) and an advisory feed that a new tool called vaccine consumes to emit OpenVEX… | ||
| How SIG Release Cooks Trustworthy Artifacts From Raw Source Code | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Three releases per year plus monthly or biweekly patch releases, with v1.25 shipping 40+ enhancements, get built on Google Cloud Build into binaries and… | ||
| From Kubernetes With ♥ Open Tools For Open, Secure Supply Chains | SupplyChainSecurityCon at Open Source Summit Europe 2022 | 2022-09-13 |
Kubernetes Release Engineering aims for SLSA Level 3 compliance (targeted around Kubernetes 1.25) and delivers a reusable open toolset: a BOM generator called… | ||
| Make the Secure Kubernetes Supply Chain Work for You | KubeCon + CloudNativeCon Europe 2022 | 2022-05-16 |
Kubernetes adds concrete supply-chain controls since 1.22: projects generate SBOMs (SPDX), produce SLSA provenance attestations outside the build to avoid… | ||
| Releasing Kubernetes Less Often and More Secure – The SIG Release Update | KubeCon + CloudNativeCon Europe 2022 | 2022-05-16 |
SIG Release reduces cadence from four to three releases per year after a community survey, reinstates automated fast‑forwarding of release branches to avoid… | ||
| Hardening the Kubernetes Software Supp... | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Kubernetes release tooling now produces an SPDX Bill of Materials with v1.22 and emits two BOMs per release (artifacts and source), adds automatic artifact… | ||
| We Built the Kubernetes SBOM and Now You Can Write Your Own! | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Kubernetes Release Engineering produces an SPDX-based SBOM that lists ~24,000 source files, 25 multi-arch images and 53 standalone binaries, and provides… | ||
| Leverage Kubernetes SPDX Tools to Create Your SBOM | Supply Chain Town Hall 2021 | 2021-08-18 |
Kubernetes release automation produces dozens of artifacts (about 30 images, 53 binaries across six architectures and three OSes) and the team builds an SBOM… | ||
| nothing matches | ||