Post

Good morning OpenSSF (@openssf.org) Community Day! #OpenSSFCommunityDay 🧵 1/N

Welcome + Opening Remarks - Steve Fernandez, General Manager, OpenSSF, The Linux Foundation #OpenSSFCommunityDay

Security Work isn't Special - Seth Larson, Security Developer-in-Residence, Python Software Foundation #OpenSSFCommunityDay

Smaller projects are shaped by tools. #OpenSSFCommunityDay

"What about xz?" #OpenSSFCommunityDay

OpenSSF in the Age of AI - Sarah Evans, Distinguished Engineer, Dell Technologies #OpenSSFCommunityDay

Patching Critical Infrastructure: Lessons from DARPA’s AI Cyber Challenge - Andrew Carney, Program Manager, Information Innovation Office, DARPA #OpenSSFCommunityDay

Taming the Wild West of ML: Practical Model Signing With Sigstore on Kaggle - Mihai Maruseac, Google #OpenSSFCommunityDay

Model signing with Sigstore #OpenSSFCommunityDay

All Your Base Are Belong To Us - Christopher Robinson, OpenSSF & Eddie Knight, Sonatype #OpenSSFCommunityDay

Myths Developers Believe About Open Source Security - Jess Lowe & Tim Zhang, Google #OpenSSFCommunityDay

Myth #2: "There is only 1 dependency graph" #OpenSSFCommunityDay

Myth #3: "Names are unique" #OpenSSFCommunityDay

Myth #4: "CVEs are unique and have no data quality issues" #OpenSSFCommunityDay

Myth #5: "You know your code" #OpenSSFCommunityDay

Trends and Insights from the Sigstore Ecosystem - Eve Martin-Jones & Hayden Blauzvern, Google #OpenSSFCommunityDay

Living Off the Pipeline: From Supply Chain 0-Days To Predicting the Next XZ-like Attacks - François Proulx, BoostSecurity.io #OpenSSFCommunityDay

Predicting OSS Vulnerabilities Through Communication Analysis: A Work in Progress - Shlok Gilda, University of Florida #OpenSSFCommunityDay

Beyond the Bot: Building Secure and Resilient AI Agents With Open Source - Mihai Maruseac, Google & Sarah Evans, Dell Technologies

SLSA Dependency Track Update - Meder Kydyraliev, Google; Adrian Diglio, Microsoft & Tom Bedford, Bloomberg #OpenSSFCommunityDay