Billy Lynch
where else to find them
no profile links on file
what they talk about
all 5 in the filters
where they keep going back
no series more than once — all 10 in the filters
on a stage with
who talks about the same things
- Alex Ilgayev4 talks
- Asra Ali7 talks
- Aditya Sirish A Yelgundhalli9 talks
- Fredrik Skogman5 talks
- Priya Wadhwa9 talks
- Radoslav Dimitrov3 talks
| title | conference | date |
|---|---|---|
| Breaking Up with Long-lived Secrets: Secure Automation in the Mode... | Open Source SecurityCon North America 2025 | 2025-11-10 |
Long‑lived pipeline credentials remain an Achilles’ heel; replacing them with short‑lived, context‑bound tokens issued via OIDC federation lets CI systems… | ||
| Where Should Source Attestations Live? Exploring Storage Strategies | Open Source SecurityCon North America 2025 | 2025-11-10 |
Compares three concrete storage patterns for SLSA source attestations: keep attestations inside the git repo using Git notes / ref attestations, push them to… | ||
| Securing OIDC Federation in CI/CD Workflows | Open Source Summit North America 2025 | 2025-06-23 |
Explains how OIDC tokens from GitHub Actions, GitLab and Kubernetes are exchanged via an STS-style federation to get short-lived cloud credentials, and shows a… | ||
| Billy and Eddie's Declassified Git Survival Guide | Open Source Summit North America 2025 | 2025-06-23 |
Covers concrete rescue steps: use git reflog as safety net to recover dropped commits, run git fetch vs git pull to see origin/main, resolve conflicts with git… | ||
| Securing Git Repositories with Gittuf | SupplyChainSecurityCon @ Open Source Summit North America 2024 | 2024-04-16 |
Gittuf embeds signed policy metadata inside Git refs so repositories carry verifiable rules and a reference state log that records every ref update, signed and… | ||
| Growing the Chain: Trusting Build Provenance from Userspace | CloudOpen @ Open Source Summit Europe 2023 | 2023-09-19 |
Explains how to trust build provenance produced in user-controllable CI by linking artifact metadata to CI configuration and build systems, using Sigstore OIDC… | ||
| Growing the Chain: Trusting Build Provenance from Userspace | Open Source Summit Europe 2023 | 2023-09-19 |
Shows how to link an artifact to CI config and the runner by using Sigstore + OIDC to mint short‑lived keys and sign provenance, and by applying SLSA levels to… | ||
| Identity-based Source Integrity with Gitsign | cdCon + GitOpsCon 2023 | 2023-05-08 |
Explains how Gitsign applies Sigstore’s keyless model to Git commits using OIDC and ephemeral keys, issuing 10-minute certificates via Fulcio and recording… | ||
| Lightning Talk: Securing Your Source Repositories - 5 Tips to Get Started! | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Enable account two-factor authentication (Google Authenticator or U2F keys) and expect platforms to enforce it; require protected branches with two-person… | ||
| Source Attestations with Gitsign | Cloud Native SecurityCon North America 2022 | 2022-10-24 |
Gitsign adds verifiable attestations to git commits by storing signed blobs in special refs inside the repo, using the Sigstore keyless flow and Rekor log so… | ||
| Gitsign – Keyless Git Commit Signing | SupplyChainSecurityCon at Open Source Summit Europe 2022 | 2022-09-13 |
Gitsign brings keyless signing to Git by generating ephemeral key pairs, exchanging an OIDC token with Fulcio to obtain short-lived certs (10 minute lifetime)… | ||
| What a Life! - Understanding the Lifecycle of a Tekton Pipeline | cdCon 2022 | 2022-06-07 |
Tekton controller resolves and pins image to digest for reproducibility and forensics, then creates a TaskRun per task and a Pod per TaskRun, with each step… | ||
| nothing matches | ||