Pedro Nacht
where else to find them
what they talk about
where they keep going back
no series more than once — all 3 in the filters
on a stage with
who talks about the same things
- Kara Olive2 talks
- Naveen Srinivasan7 talks
- Avishay Balter2 talks
- CRob8 talks
- Yesenia Yser4 talks
- Jillian Ratliff3 talks
| title | conference | date |
|---|---|---|
| Supply-Chain Security, Outside in: What Helping ~200 Projects Improve Their Security Looks Like | SOSS Fusion 2024 | 2024-10-22 |
Google’s open source security team targets ~200 critical projects using OSS-F criticality and Scorecard to prioritize work, makes 455 contributions focused on… | ||
| Adventures in Securing an Open Source Project: From Repo Security Zero... | SupplyChainSecurityCon @ Open Source Summit Europe 2023 | 2023-09-19 |
A real repository is intentionally sabotaged to a 1.2–1.9/10 Scorecard rating using missing tests, writable workflow tokens, vulnerable dependencies and an… | ||
| Adventures in Securing an Open Source Project: From Repo Security Zero to Hero | Open Source Summit Europe 2023 | 2023-09-19 |
A deliberately sabotaged repository is scored with OpenSSF Scorecard, lowered to about 1.2/10 (GitHub defaults score ~4.5) and then hardened into the top 1% of… | ||
| nothing matches | ||