Munawar Hafiz
where else to find them
no profile links on file
what they talk about
all 6 in the filters
where they keep going back
no series more than once — all 8 in the filters
on a stage with
- Michael Winser2×
- Melanie Arboronce
- Peter Sobotonce
all 4 in the filters
who talks about the same things
- Ashish Bijlani8 talks
- Brian Fox10 talks
- Jonathan Leitschuh7 talks
- Yesenia Yser4 talks
- Terri Oda7 talks
- David Korczynski6 talks
| title | conference | date |
|---|---|---|
| Where The Wild Things Are: The State Of Open Source Supply Chain Risk Management In Three Stories | CVE/FIRST VulnCon 2025 | 2025-04-07 |
Three community engagements (Apache Airflow, Jenkins, Kubernetes) scan source trees and dependencies to find previously undetected bugs, report them… | ||
| "Here Is a Clean Section of the Beach" - Proactively Auditing Op... | SupplyChainSecurityCon @ Open Source Summit Europe 2024 | 2024-09-16 |
Alpha-Omega funds a program with OpenRefactory that uses a static analysis engine called ICR to scan at scale: ~1,000 packages/month, ~6,500 PyPI artifacts… | ||
| "Here Is a Clean Section of the Beach" - Proactively Auditing Op... | Open Source Summit Europe 2024 | 2024-09-16 |
Alpha-Omega funds proactive scanning and OpenRefactory runs an ICR intelligent code repair static analyzer that audits packages at scale, producing… | ||
| May 18, 5pm | PyCon US 2024 | 2024-05-15 |
A rapid grab bag of concrete takeaways and demos from the lightning slot: crashing CPython via marshal + ctypes crash produces real segfaults from pure stdlib… | ||
| A Root Canal Static Analysis Based Audit of Zephyr | Zephyr Developer Summit @ Embedded Open Source Summit 2024 | 2024-04-16 |
Zephyr 3.5.0 ships CodeChecker (10 linters incl clang static analyzer clang tidy CPPCheck Facebook Infer) but deeper audit by OpenRefactory finds more issues… | ||
| A Root Canal Static Analysis Based Audit of Zephyr | Embedded Open Source Summit 2024 | 2024-04-16 |
Zephyr 3.5 integrates CodeChecker with 10 linters (clang analyzer, clang‑tidy, CPPCheck, Infer) but most CI scanning relies on Coverity, which reports 77… | ||
| How to Serve Open Source Maintainers Without Annoying Them? | SupplyChainSecurityCon @ Open Source Summit Japan 2023 | 2023-12-05 |
OpenRefactory scans the top 10,000 Java, Python and Go projects with Intelligent Code Repair (iCR) and other static analyzers, manually triages only… | ||
| Expanding the scope of refactoring to fix Java security problems | JCON-ONLINE 2021 | 2021-10-05 |
Claims that refactorings can fix real security and reliability bugs by rewriting code rather than just warning about it, using deep static analysis and… | ||
| nothing matches | ||