Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE
Explore cutting-edge tools for enhancing software supply chain security, focusing on Sigstore, TektonCD, and SPIFFE implementations in zero-trust environments.
A Different Kind of S3 - First Line Security of the Supply Chain
Explore three core areas for securing the software supply chain: Software Bill of Materials (SBOM), Signing, and Slimming. Learn practical methods to enhance first-line security controls and minimize attack surfaces.
What's New in Buildroot?
Explore recent updates and enhancements to Buildroot, the popular embedded Linux build system, presented by expert Thomas Petazzoni from Bootlin.
Hidden Vulnerabilities in Open Source
Explore hidden vulnerabilities in open source software with experts from Palo Alto Networks, uncovering potential risks and learning strategies for enhanced security.
A Different Kind of S3 - First Line Security of the Supply Chain
Explore innovative approaches to supply chain security, focusing on first-line defense strategies and cutting-edge solutions for robust protection against emerging threats.
5 Open Source Security Tools All Developers Should Know About
Discover five essential open-source security tools for developers, enhancing code safety and vulnerability detection in your projects.
Turning Users Into Advocates at Scale
Learn strategies to transform users into passionate advocates, focusing on community building, minimizing barriers, and fostering contributions through empathy-driven, scalable approaches.
Keeping Networks Secure - The Open Way
Explore open-source network security strategies and best practices to protect digital infrastructure effectively, presented by an expert from The Linux Foundation.
Tools and Techniques to Debug an Embedded Linux System
Explore essential tools and techniques for debugging embedded Linux systems, covering kernel crashes, tracing, interactive debugging, and memory leak detection.
Preparing for Zero-Day: Vulnerability Disclosure in Open Source Software
Learn strategies for handling vulnerability disclosures in open source projects, including best practices for communication and mitigation, to enhance software security and protect against potential attacks.
Code Aware Services for Vulnerability Detection - Welcome Back and Remarks
Explore Code Aware Services for complex software security. Learn about build tracing, source code processing, and tools for vulnerability detection in large-scale projects like Android Linux kernel.
Extensible Open-source CI for Firmware with Real Hardware Execution
Explore an extensible open-source CI system for firmware, featuring real hardware execution capabilities and insights from HPE experts.
Japan's Critical Infrastructure - Open Source Evolution in Software Development
Japan's critical infrastructure evolution: Open source trends, security considerations, and Linux Foundation projects enhancing dependability, transparency, and reproducibility for future software needs.
From Log4shell to OpenSSL - Reflections on a Year of Open Source Software Security
Explore the impact of Log4shell on open source software security, progress made, and future challenges. Gain insights into enhancing OSS security and its role in critical infrastructure.
Software Developer Diversity and Inclusion - Improving Openness in Open Source
Explore the Software Developer Diversity and Inclusion project's mission to improve representation in open source communities through best practices and industry research.
Demystifying Unreproducible Builds: What, Why, and How
Explore reproducible builds as a defense against software supply chain attacks, understanding their importance and implementation strategies for enhanced security.
Building a Flourishing Technical Community - Lessons from Delta Lake
Discover key strategies for building and growing a thriving technical community, focusing on developer engagement, branding, collaboration, and effective management with Linux Foundation partnership.
Squashing Diversity, Equity, and Inclusion Bugs in Open Source Projects
Learn strategies to identify and resolve "DEI bugs" in open source projects, fostering inclusivity and maximizing collaboration potential for underrepresented groups in tech communities.
Securing Your Software Supply Chain
Explore the current state and future of JavaScript ecosystem security, learn about emerging tools to combat threats, and discover practical strategies to protect your software supply chain.
Build a Community, Not a Framework - Panel Discussion
Explore community-building strategies in open-source projects with insights from industry experts on fostering collaboration, engagement, and sustainable growth beyond framework development.
Ketchup, Mustard, and Relish of Software Supply Chain Security - Panel Discussion
Explore open source standards and tools for enhancing software supply chain security with industry experts. Learn about S2C2F, SLSA, and FRSCA, their benefits, and how to implement them effectively.