انتقل إلى وضع عدم الاتصال باستخدام تطبيق Player FM !
Jack Cable of CISA and Zach Steindler of GitHub Dig Into Package Repository Security
Manage episode 452000935 series 3564832
CRob discusses package repository security with two people who know a lot about the topic. Zach Steindler is a principal engineer at Github, a member of the OpenSSF TAC and co-chairs the OpenSSF Security Packages Repository Working Group. Jack Cable is a senior technical advisor at CISA. Earlier this year, Zach and Jack published a helpful guide of best practices called “Principles for Package Repository Security.”
- 00:48 - Jack and Zach share their backgrounds
- 02:59 - What package repositories are and why they’re important to open source users
- 04:17 - The positive impact package security has on downstream users
- 07:06 - Jack and Zach offer insight into the "Prinicples for Package Repository Security" document
- 11:18 - Future endeavors of the Securing Software Repositories Working Group
- 17:32 - Jack and Zach answer CRob’s rapid-fire questions
- 19:31 - Advice for those entering the industry
- 21:28 - Jack and Zach share their calls to action
Episode links:
24 حلقات
Manage episode 452000935 series 3564832
CRob discusses package repository security with two people who know a lot about the topic. Zach Steindler is a principal engineer at Github, a member of the OpenSSF TAC and co-chairs the OpenSSF Security Packages Repository Working Group. Jack Cable is a senior technical advisor at CISA. Earlier this year, Zach and Jack published a helpful guide of best practices called “Principles for Package Repository Security.”
- 00:48 - Jack and Zach share their backgrounds
- 02:59 - What package repositories are and why they’re important to open source users
- 04:17 - The positive impact package security has on downstream users
- 07:06 - Jack and Zach offer insight into the "Prinicples for Package Repository Security" document
- 11:18 - Future endeavors of the Securing Software Repositories Working Group
- 17:32 - Jack and Zach answer CRob’s rapid-fire questions
- 19:31 - Advice for those entering the industry
- 21:28 - Jack and Zach share their calls to action
Episode links:
24 حلقات
كل الحلقات
×
1 Kusari’s Michael Lieberman Talks GUAC, SLSA and Securing the Open Source Supply Chain 21:06

1 Sovereign Tech Agency’s Tara Tarakiyee and Funding Important Open Source Projects 16:47

1 Alpha-Omega’s Michael Winser and Catalyzing Sustainable Improvements in Open Source Security 27:15

1 Jack Cable of CISA and Zach Steindler of GitHub Dig Into Package Repository Security 23:44

1 Red Hat's Rodrigo Freire and the Impact of High-Profile Security Incidents 16:58

1 Canonical’s Stephanie Domas and Security Insight from a Self-Described “Tinkerer” 16:58

1 Intel’s Katherine Druckman and the Impact of Developer Relations 14:23

1 Dell's Sarah Evans and Lisa Bradley and Ensuring Secure Open Source Software at the Enterprise Level 16:24

1 CoSAI, OpenSSF and the Interesting Intersection of Secure AI and Open Source 22:47

1 GitHub’s Mike Hanley and Transforming the “Dept. of No” Into the "Dept. of Yes, And…” 22:43

1 CISA's Aeva Black and the Public Sector View of Open Source Security 12:13

1 Google’s Andrew Pollock and Addressing Open Source Vulnerabilities 12:16

1 Rust Foundation’s Bec Rumbul and Succeeding as a “Non-Techie” in a Tech-Heavy Industry 18:28

1 Sonatype’s Brian Fox and the Perplexing Phenomenon of Downloading Known Vulnerabilities 22:24
مرحبًا بك في مشغل أف ام!
يقوم برنامج مشغل أف أم بمسح الويب للحصول على بودكاست عالية الجودة لتستمتع بها الآن. إنه أفضل تطبيق بودكاست ويعمل على أجهزة اندرويد والأيفون والويب. قم بالتسجيل لمزامنة الاشتراكات عبر الأجهزة.