Joshua Lock
where else to find them
no profile links on file
what they talk about
where they keep going back
- KubeCon + CloudNativeCon North America2 editions2019–2021
all 9 in the filters
on a stage with
all 12 in the filters
who talks about the same things
- Marina Moore37 talks
- Justin Cappos23 talks
- Michael Lieberman36 talks
- Asra Ali7 talks
- John Kjell16 talks
- Dan Lorenc21 talks
| title | conference | date |
|---|---|---|
| Securing build platforms | Linux Plumbers Conference 2023 | 2023-11-13 |
Maps SLSA concepts to distribution build platforms and demonstrates a Yocto proof of concept: generates SLSA provenance metadata, signs it to bind artifacts to… | ||
| Ketchup, Mustard, and Relish... | SupplyChainSecurityCon @ Open Source Summit Europe 2023 | 2023-09-19 |
Salsa reaches version 1.0 (April) with a focused build track and three build levels emphasizing provenance generation, attestation, and isolation; Fresca… | ||
| Ketchup, Mustard, and Relish... | Open Source Summit Europe 2023 | 2023-09-19 |
Panel covers concrete outputs: SLSA 1.0 (April, 3 build levels) defines provenance, unforgeable attestations and isolation strength for build platforms; the… | ||
| No Keys? No Problem: Why You Can Trust Sigstore Signatures | SigstoreCon North America 2022 | 2022-10-25 |
Explains why Sigstore relies on TUF (tough) to make a keyless user experience auditable and recoverable, showing a GitHub-hosted trust root with signed… | ||
| What Makes A Build Reproducible? | SupplyChainSecurityCon at Open Source Summit North America 2022 | 2022-06-21 |
Defines three concrete levels: repeatable (scripted build steps), rebuildable builds (internal mirrors and cached intermediates produce equivalent artifacts… | ||
| An Overview on SLSA | SupplyChainSecurityCon North America 2021 | 2021-10-11 |
SLSA defines four numbered levels (1–4) with concrete requirements: level 1 produces unsigned provenance; level 2 moves checks into the build service; level 3… | ||
| Securing Content Repositories with the Update Framework (TUF) | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Explains how TUF guarantees freshness, consistency and integrity using cryptographic signatures, short-expiry timestamps, role separation, threshold keys and… | ||
| Securing Content Distribution with The Update Framework (TUF) | KubeCon + CloudNativeCon Europe 2021 | 2021-05-04 |
The Update Framework (TUF) provides concrete defenses: cryptographic signatures plus metadata expiry to enforce freshness, consistency, integrity, role-based… | ||
| Linux Distribution Build Tools for Custom Container Images | KubeCon + CloudNativeCon North America 2019 | 2019-11-18 |
Experiments use Debian/Debos, Buildroot, Yocto and Guix to build reproducible container images and evaluate ease, size, effort and SBOM availability. Debos… | ||
| TPM Software Stack - Enabling the TPM2.0 Ecosystem in Linux | Linux Security Summit Europe 2018 | 2018-10-25 |
TPM2.0 userspace becomes a usable Linux ecosystem: kernel drivers land in v4.0 and embedded support in v4.9, a resource manager moves partly into the kernel… | ||
| nothing matches | ||