Philippe Ombredanne
where else to find them
what they talk about
all 6 in the filters
where they keep going back
- FOSDEM2 editions2021–2022
- Open Source Summit Europe2 editions2024–2025
all 9 in the filters
on a stage with
all 13 in the filters
who talks about the same things
- Thomas Steenbergen21 talks
- Steve Springett9 talks
- Hritik Vijay3 talks
- Michael Lieberman36 talks
- Tracy Ragan26 talks
- Eve Martin-Jones10 talks
| title | conference | date |
|---|---|---|
| Turn CRA Awareness into Action | Code and Compliance Community Day 2025 | 2025-10-22 |
Octet stitches OSS Review Toolkit and OR server into a federated data layer that stores package facts as text in many git repos and an operational Postgres… | ||
| Better PURLs for Better Software Compliance Processes | Open Source Summit Europe 2025 | 2025-08-25 |
PURL adoption is widespread but tools produce inconsistent identifiers (a 2024 SCA study and follow-up audits show poor agreement), so Better PURLs builds… | ||
| The Current State of Open Source Security Compliance Tooling Is … Well, Sad. | SOSS Community Day Europe 2024 | 2024-09-19 |
A recent study finds many generated SBOMs are invalid JSON and tools disagree on identifiers, with inconsistent CycloneDX outputs and mismatched package URL… | ||
| SCA for Containers: The Good, the Bad, and the Truth | ContainerCon @ Open Source Summit Europe 2024 | 2024-09-16 |
A head-to-head test of open and commercial SCA tools scans several common container base images, tries to build an SBOM Clarity index, and finds widespread… | ||
| SCA for Containers: The Good, the Bad, and the Truth | Open Source Summit Europe 2024 | 2024-09-16 |
A project attempts an SBOM Clarity index by running many open and commercial SCA tools against common container bases and finds frequent failures: invalid or… | ||
| Non-Vulnerable Dependency Resolution | foss-north 2024 | 2024-04-15 |
Proposal: merge dependency constraints with vulnerability version ranges so resolvers avoid selecting vulnerable versions. Uses a normalized identifier… | ||
| Purl and Vers: The Mostly Universal Package URL & Version Ranges Identifiers for Dependencies &... | SupplyChainSecurityCon at Open Source Summit North America 2022 | 2022-06-21 |
Proposes PURL for exact cross-ecosystem package IDs and VERS for a minimal, ecosystem-aware version-range syntax that maps comparators (>, >=, etc.) into each… | ||
| Devroom introduction | FOSDEM 2022 | 2022-02-05 |
The devroom intro by devroom organization team! | ||
| Package URL and Version range spec | FOSDEM 2022 | 2022-02-05 |
Towards mostly universal dependency resolution
Package URLs are a compact way to identify software packages across multiple ecosystems.
Together with the new… | ||
| Panel 4: Software Compositions and Dependency Tools | FOSDEM 2022 | 2022-02-05 |
As the presentations discuss, identifying dependencies can be a tedious task. It depends on the software project itself, as well as the used technology stack… | ||
| Software Composition Analysis with Free Tools | Open Source Summit + Embedded Linux Conference + OSPOCon 2021 | 2021-09-27 |
Claim: full software composition analysis works with free tools and free data; demonstration scans a Docker Node+Debian image and finds ~3,000 packages and… | ||
| Software Composition Analysis Devroom Welcome | FOSDEM 2021 | 2021-02-06 |
What is SCA?
Welcome to the Software Composition Analysis Devroom
This presentation introduces the devroom on software composition - an emerging topic on… | ||
| ScanCode projects update | FOSDEM 2021 | 2021-02-06 |
Open source scanning
This is a presentation of the latest features and updates in ScanCode toolkit and its companion projects.
ScanCode toolkit is an open… | ||
| Devroom Software Composition: Concluding Remarks | FOSDEM 2021 | 2021-02-06 |
If we come to this presentation: A big thank you for all persons who have submitted their presentation and many thanks for all attending. | ||
| Fetchcode A smart code downloader | PyCon India 2020 | 2020-10-02 |
Fetchcode is a GSOC-built library that downloads by plain URL or standardized package-url and returns rich packagecode models (metadata, licenses, download… | ||
| nothing matches | ||