John Amaral
where else to find them
linkedin:john-amaral-a359241
what they talk about
where they keep going back
no series more than once — all 4 in the filters
on a stage with
who talks about the same things
- Yash Pimple4 talks
- Dan Lorenc21 talks
- Brandon Lum23 talks
- Michael Lieberman36 talks
- Adrian Mouat20 talks
- Tom Hennen4 talks
| title | conference | date |
|---|---|---|
| How Secure is Your Base Image? ... | KCD SF Bay Area 2025 | 2025-09-09 |
Scans of three common base images (Golang, Python 3.10, and an MCP gateway) reveal concrete problems: a Golang image shows massive accumulated CVEs with 3… | ||
| A Different Kind of S3: First Line Security of the Supply Chain | ContainerCon @ Open Source Summit Europe 2022 | 2022-09-13 |
Three concrete defenses: SBOMs for inventory and retrospective exposure mapping, Sigstore signing (also noting Notary) to attach cryptographic provenance, and… | ||
| A Different Kind of S3: First Line Security of the Supply Chain | CloudOpen @ OSS LATAM 2022 | 2022-08-23 |
Three practical defenses claim to cut supply chain risk: generate s-bombs (machine‑readable SBOMs stored in artifact stores or S3 for retrospective… | ||
| A Different Kind of S3: First Line Security of the Supply Chain | Open Source Summit Latin America 2022 | 2022-08-23 |
Three concrete defenses: produce and store SBoMs (required by the U.S. government, and they let teams quantify Log4j exposure), adopt cryptographic signing… | ||
| nothing matches | ||