Joseph Hejderup
where else to find them
what they talk about
where they keep going back
no series more than once — all 3 in the filters
on a stage with
never shared a talk
who talks about the same things
- Chris Horn2 talks
- Ashish Bijlani8 talks
- Gabor Horvath13 talks
- Nic Wortel2 talks
- Eve Martin-Jones10 talks
- Jeremy Long4 talks
| title | conference | date |
|---|---|---|
| Prioritisation of SCA Findings in Software Dependencies Using Static Reachability Analysis | SOSS Community Day Europe 2024 | 2024-09-19 |
Demonstrates using static reachability analysis and call graphs to cut noise from SCA alerts: manifests list transitive libraries but code-level reachability… | ||
| Why We Need to Adopt Static Analysis in Dependency Tools | Conf42 DevSecOps 2022 | 2022-12-01 |
Claim: static analysis cuts irrelevant alerts by matching usage not metadata. Empirical result on the Rust ecosystem shows metadata reports a median of 17… | ||
| Going Beyond Metadata: Why We Need to Think of Adopting Static Analysis in Dependency Tools | SupplyChainSecurityCon at Open Source Summit North America 2022 | 2022-06-21 |
Argues that metadata-only dependency tools produce many false positives for transitive libraries and that lightweight static analysis — especially call graphs… | ||
| nothing matches | ||