Trevor Rosen
where else to find them
what they talk about
all 5 in the filters
where they keep going back
no series more than once — all 5 in the filters
on a stage with
who talks about the same things
- Zach Steindler9 talks
- Dan Lorenc21 talks
- Santiago Torres-Arias14 talks
- Radoslav Dimitrov3 talks
- Asra Ali7 talks
- Laurent Simon5 talks
| title | conference | date |
|---|---|---|
| Where Does Your Software (Really) Come from? | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
GitHub ships Artifact Attestations: a signing flow that binds any artifact built with Actions back to the originating repo and commit using OIDC keyless keys… | ||
| npm and Sigstore: Provenance Comes to the World's Largest OSS Ecosystem | Black Hat USA 2023 | 2023-08-05 |
npm adds verifiable build provenance to a registry that sees ~70 billion requests/month and ~40k daily publishes, offering a public beta since April with… | ||
| Bringing Provenance to All of Open Source: Lessons from Npm’s Sigstore Integration | SupplyChainSecurityCon @ OSS NA 2023 | 2023-05-10 |
npm ties a package back to exact commits and build instructions for the registry that serves 70 billion packages per month by adding a flag npm publish… | ||
| Keynote: Project Trebuchet: How SolarWinds is Using Open Source to Secure Their Supp... | SupplyChainSecurityCon North America 2021 | 2021-10-11 |
Sunburst compromises Orion via a malicious DLL and stays inside for about 18 months, impacting fewer than 100 customers. The response rebuilds CI/CD as Project… | ||
| Building a binary protocol client in Ruby: A magical journey! | LoneStarRuby Conf 2015 | 2015-08-15 |
Rapid7 Metasploit developers build a pure-Ruby SMB library that parses and emits SMB v1/v2/3 packets, uses Wireshark to map wire captures to the spec… | ||
| nothing matches | ||