CRob
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 4 in the filters
on a stage with
- David Wheeler2×
- John Kjellonce
- Madison Oliveronce
all 4 in the filters
who talks about the same things
- David Wheeler6 talks
- Yesenia Yser4 talks
- Avishay Balter2 talks
- Stacey Potter5 talks
- Emma Irwin8 talks
- Eddie Knight9 talks
| title | conference | date |
|---|---|---|
| Hitchhikers' Guide to the Vulniverse | SOSS Community Day Europe 2024 | 2024-09-19 |
A rapid tour of the actual artifacts and rules used to manage vulnerabilities: identifiers (CVE issued by CNAs), root causes (CWE, ~200 entries), and severity… | ||
| 6 Months In: (Building and) Using the OpenSSF Se... | SupplyChainSecurityCon @ Open Source Summit North America 2024 | 2024-04-16 |
Six months of work produces a concrete model: a catalog of nine security capabilities from creation to retirement, mapped to real tools (Salsa for Salsa builds… | ||
| Implementing the OpenSSF Best Practices Badges & Scorecards Into Your Project | Open Source Summit Europe 2023 | 2023-09-19 |
Scorecard automatically rates repos on a scorecard 0–10 scale across ~18 automated checks (branch protection, pinned deps, signed releases, CI/fuzzing… | ||
| Simplifying Coordinating Vulnerabilities & Disclosures in Open Source... | Open Source Leadership Summit @ Open Source Summit North America 2023 | 2023-05-10 |
Explains concrete steps and tools: publishes two OpenSSF guides on GitHub (maintainer and reporter), recommends publishing a clear security policy, setting a… | ||
| Implementing the OpenSSF Best Practices Badges & Scorecards Into Your Project | Open Source Leadership Summit @ Open Source Summit North America 2023 | 2023-05-10 |
OpenSSF Best Practices defines measurable criteria (passing/silver/gold) that require a security policy, vulnerability reporting, at least one automated test… | ||
| nothing matches | ||