Jeremy Long
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 3 in the filters
on a stage with
never shared a talk
who talks about the same things
- Eve Martin-Jones10 talks
- Ashish Bijlani8 talks
- Josh Bressers9 talks
- Jillian Ratliff3 talks
- Adrian Diglio4 talks
- Vinod Anandan2 talks
| title | conference | date |
|---|---|---|
| Reflections on Trust in the Software Supply Chain | Black Hat USA 2023 | 2023-08-05 |
Survey of current defenses (SLSA, SBOM/CycloneDX 1.5, code signing) shows gaps: build plugins and extensions can inject payloads during CI/CD. Demo uses a… | ||
| Dependency Check Project | OWASP 2022 Global AppSec Europe Virtual Event | 2022-11-04 |
Open-source SCA that started in 2011 and currently uses the NVD plus Sonatype’s OSS Index to find CVEs, with a Docker image at about 3.5M pulls and… | ||
| Flagship Projects: Dependency-Check | OWASP 20th Anniversary 2021 | 2021-09-24 |
OWASP Dependency-Check claims to find known vulnerable components by matching dependencies against the NVD and OSS Index, using evidence-based identification… | ||
| nothing matches | ||