🐺 [Oct 28] GitBlame: Werewolf Happy Hour @GitHub Universe
Securing the software supply chain from code signing to distribution. Covers provenance, dependency tracking, container image hardening, open source risk management, and the gap between corporate security tooling and open source ecosystems. Drawn from practitioners at Chainguard, Snyk, and others.
Alex works for the United States Digital Service and writes a lot of Python open source code. He serves as a director of the...