Rose Judge
where else to find them
what they talk about
all 5 in the filters
where they keep going back
no series more than once — all 7 in the filters
on a stage with
all 12 in the filters
who talks about the same things
- Ivana Atanasova5 talks
- Takashi Ninjouji5 talks
- Gary O'Neall11 talks
- Nisha Kumar11 talks
- Alexios Zavras19 talks
- Adolfo García Veytia34 talks
| title | conference | date |
|---|---|---|
| Bringing Service Security to a New Level: An Introduction to SaaSBOMs | SupplyChainSecurityCon @ Open Source Summit Europe 2023 | 2023-09-19 |
Defines a SaaSBOM as a snapshot linking one service to many SBOMs plus service metadata like service identifier, data flow and classification, geographic… | ||
| Bringing Service Security to a New Level: An Introduction to SaaSBOMs | Open Source Summit Europe 2023 | 2023-09-19 |
Defines SaaSBOM as a runtime snapshot linking one service to many SBOMs and claims SPDX and CycloneDX are building formats and profiles to express that… | ||
| SPDX 3.0 Update | SPDX 3.0 Mini Summit @ Open Source Summit Europe 2023 | 2023-09-18 |
SPDX 3.0 centralizes a new profiles concept that narrows what metadata a producer must carry (security, safety, AI data, build, licensing, software, core)… | ||
| SBOMs, VEX, and Kubernetes | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Pick one of the SBOM formats (CycloneDX or SPDX) and generate SBOMs at build time as part of CI; treat signing and provenance as phase two work and add VEX… | ||
| What Makes A Build Reproducible? | SupplyChainSecurityCon at Open Source Summit North America 2022 | 2022-06-21 |
Defines three concrete levels: repeatable (scripted build steps), rebuildable builds (internal mirrors and cached intermediates produce equivalent artifacts… | ||
| Maintainers | PyCon US 2021 | 2021-05-14 |
Collection of concrete maintainer tactics and failures: GitHub Actions recipes that run Lighthouse, draft releases with release-drafter, and an take-action… | ||
| Tern and the State of Cloud Native Compliance | FOSDEM 2021 | 2021-02-06 |
Container and VM images contain many packages and are quite a challenge for composition analysis.
The current industry standard for container compliance is to… | ||
| nothing matches | ||