Loading…
cdCon 2022 has ended
Austin, Texas | June 7-8, 2022
View More Details & Registration

The schedule is subject to change.

Please note all session times are listed in Central Daylight Time (CDT), UTC -5.
To view the schedule at your preferred time, please choose your location on the right-hand navigation panel under ’Timezone’.
Back To Schedule
Tuesday, June 7 • 9:40am - 10:10am
Repurposed Purpose: Using git's DAG for Supply Chain Artifact Resolution - Ed Warnicke, Cisco

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
What if we could know the complete and reproducible artifact tree for every binary, shared object, container, etc (including all dependencies) and you could efficiently cross-reference that against a database of known vulnerabilities before you deploy? If you had had that information, could you have remediated Log4Shell faster? Might it even help open source maintainers identify at-risk dependencies sooner? In this talk, Aeva and Ed will share why they're so excited about GitBOM and explain what it is (hint: it's not git and it's not an SBOM). If the demo gods are willing, they will show you how you can generate a GitBOM with a simple command-line tool, and explain why you won't have to. Finally, if you want to add support for GitBOM to your favorite tool or language, this talk will give you enough information to get started.
Speakers
avatar for Ed Warnicke

Ed Warnicke

Distinguished Engineer, Cisco Systems
Ed Warnicke is a Distinguished Engineer at Cisco Systems. He has been working for two decades in many areas of networking and Open Source. Ed is currently a co-founder of and active contributor to the OmniBOR and Network Service Mesh projects. Ed has a masters in Physics (String Theory... Read More →

cdCon NA 2022 GitBOM pdf
Tuesday June 7, 2022 9:40am - 10:10am CDT
JW Grand Ballroom 4
  GitOps, Security & Supply Chain Security
  • Technology Focus Other
  • Presentation Slides Attached Yes