John Kjell
where else to find them
github:jkjell
linkedin:john-kjell
what they talk about
all 4 in the filters
where they keep going back
no series more than once — all 6 in the filters
on a stage with
- Marina Moore2×
- Brandt Kelleronce
- CRobonce
all 7 in the filters
who talks about the same things
- Santiago Torres-Arias14 talks
- Dan Lorenc21 talks
- Michael Lieberman36 talks
- Brandt Keller10 talks
- Brandon Lum23 talks
- Frederick Kautz27 talks
| title | conference | date |
|---|---|---|
| Welcome + Opening Remarks | Open Source SecurityCon North America 2025 | 2025-11-10 |
Welcome notes outline logistics and community work: three simultaneous rooms, lunch at Hall B1, reception at 5:30, sponsors Changard Docker Red Hat Minimus… | ||
| Dirty Dancing - Untrustworthy SLSA Build Provenance | Open Source SecurityCon North America 2025 | 2025-11-10 |
Asserts that SLSA Level 3 provenance can be misleading, using slsa-github-generator plus GitHub Actions, sigstore/cosign, OCI.fyi and GitHub attestation to… | ||
| Closing Remarks | Open Source SecurityCon North America 2025 | 2025-11-10 |
Conference returns after a pause and highlights cross‑track learning and community rebuilding, with three diamond sponsors: Changard, Docker, Red Hat, plus… | ||
| Conference‑Driven Development: Discovery Engines or Disappointing Disa... | CNCF Maintainer Summit North America 2025 | 2025-11-09 |
Claim: use CFP deadlines as structured R&D sprints so teams submit→prototype→feedback→release→present within a conference cycle. Workflow maps ambition… | ||
| The Chain of Command: Building Trust Across Public Sector Software Pipelines | Open Source Summit Europe 2025 | 2025-08-25 |
Public sector lacks a shared root of trust and often runs airgapped or nonpublic infrastructure, so the group produces a reference architecture and white paper… | ||
| Chain Reaction: Remixing CNCF’s Supply Chain Security Guide for 2025 | Open Source Summit Europe 2025 | 2025-08-25 |
CNCF’s updated Supply Chain Best Practices (v2) lays out concrete changes: industry adoption of SBOMs and attestations, a growing toolset (in-toto, TUF, SLSA… | ||
| Your SBOM Is Lying To You – Let’s Make It Honest | Open Source Summit Europe 2025 | 2025-08-25 |
Current SBOMs routinely miss runtime artifacts and build-time inclusions; SBOMit captures build activity with in-toto attestations, records file and… | ||
| Identity-based Trust - Till Death Do We Part? | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Sigstore is used for identity signing but append-only Rekor means illegitimate certificates stay forever; the talk demonstrates an emergency release where a… | ||
| Demystify Modern Signing: Keys, Certs, and Envelopes | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
Compares Cosign, Notation, TUF and in-toto by walking signatures, envelopes and certificates, using Sigstore/Witness to mint an attestation and exporting the… | ||
| 6 Months In: (Building and) Using the OpenSSF Se... | SupplyChainSecurityCon @ Open Source Summit North America 2024 | 2024-04-16 |
Six months of work produces a concrete model: a catalog of nine security capabilities from creation to retirement, mapped to real tools (Salsa for Salsa builds… | ||
| A Step Closer to in-Toto’lly Secure: Using in-Toto and OPA Gatekeeper... | SupplyChainSecurityCon @ Open Source Summit North America 2024 | 2024-04-16 |
Demonstrates an end-to-end pipeline that generates signed attestations for each CI step with in-toto tooling, captures commands via Witness, stores and indexes… | ||
| nothing matches | ||