Naveen Srinivasan
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 6 in the filters
on a stage with
- Brian Russell3×
- Jeff Mendozaonce
- Laurent Simononce
all 4 in the filters
who talks about the same things
- Spencer Schrock2 talks
- Avishay Balter2 talks
- Jeff Mendoza8 talks
- Pedro Nacht3 talks
- Kara Olive2 talks
- CRob8 talks
| title | conference | date |
|---|---|---|
| Verifying the Validity of Crowd-Sourced Results in the Open Source Community: The Scorecard GitHub Action and Sigstore | SupplyChainSecurityCon @ OSS NA 2023 | 2023-05-10 |
The Scorecard GitHub Action produces crowd-sourced security results for ~1,000,000 repositories per week and signs each result with Sigstore tooling: cosign… | ||
| How Do You Trust Open Source Software? | RSA Conference 2023 | 2023-04-24 |
OpenSSF Scorecard is an automated scanner that assigns 0–10 scores per heuristic (starts at 10 then deducts) and exposes a public API plus a GitHub Action and… | ||
| How do you trust your open source software? | BSidesSF 2023 | 2023-04-22 |
Automated OpenSSF Scorecard runs 1.2 million weekly GitHub scans and reduces each heuristic to a score 0–10 per check, exposing concrete issues like… | ||
| How Do You Trust Your Open Source Software? | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
OpenSSF Scorecard programmatically scores open source projects by running ~70 checks (examples: binary artifacts, pinned deps, code review) and exposes results… | ||
| Assessing the Risk of Open-source Components Using OpenSSF's Scorecard | SupplyChainSecurityCon at Open Source Summit North America 2022 | 2022-06-21 |
OpenSSF Scorecard is an open-source scanner with a CLI and GitHub Action that runs ~1 million repositories weekly and publishes results to BigQuery; it… | ||
| Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities | OpenSSF Day 2022 | 2022-06-20 |
Automated tools measure trustworthiness by running concrete checks and taking actions: Scorecard runs via docker or a GitHub Action using a GitHub token to… | ||
| nothing matches | ||