Post

"What about xz?" #OpenSSFCommunityDay

OpenSSF in the Age of AI - Sarah Evans, Distinguished Engineer, Dell Technologies #OpenSSFCommunityDay

Patching Critical Infrastructure: Lessons from DARPA’s AI Cyber Challenge - Andrew Carney, Program Manager, Information Innovation Office, DARPA #OpenSSFCommunityDay

Taming the Wild West of ML: Practical Model Signing With Sigstore on Kaggle - Mihai Maruseac, Google #OpenSSFCommunityDay

Model signing with Sigstore #OpenSSFCommunityDay

All Your Base Are Belong To Us - Christopher Robinson, OpenSSF & Eddie Knight, Sonatype #OpenSSFCommunityDay

Myths Developers Believe About Open Source Security - Jess Lowe & Tim Zhang, Google #OpenSSFCommunityDay

Myth #2: "There is only 1 dependency graph" #OpenSSFCommunityDay

Myth #3: "Names are unique" #OpenSSFCommunityDay

Myth #4: "CVEs are unique and have no data quality issues" #OpenSSFCommunityDay

Myth #5: "You know your code" #OpenSSFCommunityDay

Trends and Insights from the Sigstore Ecosystem - Eve Martin-Jones & Hayden Blauzvern, Google #OpenSSFCommunityDay

Living Off the Pipeline: From Supply Chain 0-Days To Predicting the Next XZ-like Attacks - François Proulx, BoostSecurity.io #OpenSSFCommunityDay

From Model To Trust: Building Upon Tamper-proof ML Metadata Records - Mihai Maruseac, Google & Eoin Wickens, HiddenLayer #OpenSSFCommunityDay

Predicting OSS Vulnerabilities Through Communication Analysis: A Work in Progress - Shlok Gilda, University of Florida #OpenSSFCommunityDay

Beyond the Bot: Building Secure and Resilient AI Agents With Open Source - Mihai Maruseac, Google & Sarah Evans, Dell Technologies

SLSA Dependency Track Update - Meder Kydyraliev, Google; Adrian Diglio, Microsoft & Tom Bedford, Bloomberg #OpenSSFCommunityDay

Delighted to cross paths with Jason (Hand) again. #SameTeamDifferentCompanies #OSSummit

Go and visit the SLSA Dependency Track @ slsa.dev/spec/draft/d... #OpenSSFCommunityDay

Adrian Diglio (Microsoft), Meder Kydyraliev (Google), Tom Bedford (Bloomberg) #OpenSSFCommunityDay

👆 Unquestionably one of the most entertaining talks! #OpenSSFCommunityDay

Simplifying SBOM Management: An Introduction To Bomctl - Allen Shearin & Ian Dunbar-Hall, Lockheed Martin #OpenSSFCommunityDay

Enhancing Supply Chain Security: Integrating Zarf and GUAC for Seamless SBOM Generation and Delivery - Brandt Keller, Defense Unicorns #OpenSSFCommunityDay