Attending this event?
16 - 17 May 2022
Valencia, Spain
View More Details & Registration

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2022 - Valencia, Spain and add this Co-Located event to your registration to participate in these sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Central European Standard Time, UTC +2. To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."  The schedule is subject to change.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.
Back To Schedule
Tuesday, May 17 • 11:12 - 11:22
Lightning Talk: Repurposed Purpose: Using Git's DAG for Supply Chain Artifact Resolution - Aeva Black, Microsoft

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Log in to leave feedback.
What if we could know the complete and reproducible artifact tree for every binary executable, shared object, container, &etc – including all its dependencies – and you could efficiently cross-reference that against a database of known vulnerabilities? If you had had that information, could you have remediated Log4Shell faster? Might it even help open source maintainers identify at-risk dependencies sooner? If you're thinking, "this sounds too good to be true - what's it going to cost?", then we really hope you’ll join us because we believe this should be an automatic part of open source build tools. In this talk, Aeva and Ed will share why they're so excited about GitBOM and explain what it is (hint: it's not git and it's not an SBOM). If the demo gods are willing, they will show you how you can generate a GitBOM with a simple command-line tool, and explain why you won't have to.

Click here to view captioning/translation in the MeetingPlay platform!

avatar for Aeva Black

Aeva Black

Open Source Hacker, Azure Office of the CTO
Aeva Black is an incurably queer geek and open source hacker, passionate aboutprivacy, ethics, and ancient languages. They work in Azure's Office of the CTOand hold seats on the Board of the Open Source Initiative and on the OpenSSF'sTechnical Advisory Council. Aeva previously served... Read More →

Tuesday May 17, 2022 11:12 - 11:22 CEST
Pavilion 4 | Room B | Level 2 | Central Forum