~/talks

Nisha Kumar

what they talk about

all 5 in the filters

where they keep going back

all 7 in the filters

on a stage with

all 5 in the filters

who talks about the same things

titleconferencedate
SBOM in SaaS Environments: An UpdateSupplyChainSecurityCon @ Open Source Summit North America 20242024-04-16
CISA spins up a year-long CISA workstream in April 2023 with three subgroups and publishes a white paper defining how SBOMs apply to SaaS; the group finds…
Talk on
Is SBOM for the Cloud Even a Thing?SupplyChainSecurityCon @ OSS NA 20232023-05-10
SBOMs for networked cloud services prove limited because services are not distributed products; a list of packages rarely tells whether an API path is…
Talk on
BoF: State of SBOM ToolsSupplyChainSecurityCon at Open Source Summit Europe 20222022-09-13
Group documents what SBOM tools actually do, what is missing, and where accuracy breaks down: producers can generate SPDX and CycloneDX SBOMs and projects like…
Talk on
SBOM: The Rest Of the StoryCloud Native Security Conference North America 20212021-10-12
Covers why SBOMs are a practical shared data layer not a silver bullet: SPDX and CycloneDX are the common formats, signing via sigstore helps provenance, and…
Talk on
The State of SBOMsSupplyChainSecurityCon North America 20212021-10-11
Cloud-native projects now produce SBOMs at build time and Kubernetes ships SBOMs in a recent release, using standards like CycloneDX and SPDX and tools such as…
Talk on
Back to the Drawing Board: Building Containers with SBoMsKubeCon + CloudNativeCon North America 20212021-10-11
Containers lose package metadata during multi-stage builds and docker-slim, so static scanners miss contents. Demonstrates how to generate SBoM at build time…
Talk on
Back to the Drawing Board: Building Containers with SBoMsOpen Source Summit + Embedded Linux Conference + OSPOCon 20212021-09-27
Argues for producing SBOMs during container builds so metadata survives slimming and multi-stage steps, demonstrates using builder to assemble a debian base…
Talk on
Linux Distribution Build Tools for Custom Container ImagesKubeCon + CloudNativeCon North America 20192019-11-18
Experiments use Debian/Debos, Buildroot, Yocto and Guix to build reproducible container images and evaluate ease, size, effort and SBOM availability. Debos…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.