Gary O'Neall
where else to find them
what they talk about
all 6 in the filters
where they keep going back
no series more than once — all 6 in the filters
on a stage with
all 5 in the filters
who talks about the same things
- Takashi Ninjouji5 talks
- Alexios Zavras19 talks
- Jeff Shapiro4 talks
- Rose Judge8 talks
- Ian Dunbar-Hall3 talks
- Norio Kobota6 talks
| title | conference | date |
|---|---|---|
| SPDX: Tackling System Risk in Modern Supply Chains | PyTorch Conference 2025 | 2025-10-22 |
SPDX 3.0 encodes software, models, datasets and hardware as linked artifacts so system-level risk can be reasoned about using a knowledge graph. The talk gives… | ||
| Enhancing SBOM Generation: Filling the Gaps To Make Actionable SBO... | Open Source Summit North America 2025 | 2025-06-23 |
SBOM reference implementations for Python, Java and JavaScript produce pipelines that augment Syft/Trivy output with top-level metadata, enrich thousands of… | ||
| Using SBOMs for Linux Foundation Projects | Open Source Summit North America 2025 | 2025-06-23 |
Linux Foundation generates a unified SBOM that combines source scanning and dependency analysis for ~260 projects out of ~1,200, finding a 40% rate of key… | ||
| Services profile | SPDX 3.0 Mini Summit @ Open Source Summit Europe 2023 | 2023-09-18 |
A Services profile for SPDX 3.1 is under active development to record service-level metadata not covered by software SBOMs, aiming to capture certificate… | ||
| SPDX Java libraries & validation | SPDX 3.0 Mini Summit @ Open Source Summit Europe 2023 | 2023-09-18 |
Prototype lives on a separate branch and a generator currently in a personal repo is generating Java files from the specification so source stays in sync and… | ||
| Licensing | SPDX 3.0 Mini Summit @ Open Source Summit Europe 2023 | 2023-09-18 |
SPDX 3.0 keeps most of 2.3 but makes three concrete changes: it adds license additions so WITH can point to custom-defined clauses, it splits licensing into… | ||
| An SBOM Primer: From Licenses to Security, Know What’s in Your Code, or Someone Else’s! | SupplyChainSecurityCon @ OSS NA 2023 | 2023-05-10 |
Minimum SBOM here is concrete: a 38-line NTIA-conformant file with supplier, component name, version, unique IDs (PackageURL/CPE/CVE), dependency relationships… | ||
| Tracking Software Dependencies | FOSDEM 2022 | 2022-02-05 |
The accurate identification of software elements and their dependency relationships are critical for understand when specific software is exploitable… | ||
| SPDX Dashboard | Collaboration Summit 2013 | 2013-04-15 |
SPDX tooling set centers on command-line Java utilities that convert between formats, validate documents, and produce human-readable output: SPDX tag-value ↔… | ||
| nothing matches | ||