Baseline w/ Ben Cotton

Gemara w/ Naseer Mohammed

Switching up the roles this time, Naseer Mohammed from Google Cloud hits me with questions about OpenSSF's Gemara project (the GRC Engineering Model for Automated Risk Assessments).

Common Cloud Controls w/ Rob Moffat

Rob and I recorded today after our weekly sync to give listeners a quick introduction to the FINOS Common Cloud Controls project, and some of its latest progress. You can check out the latest from the CCC project at ccc.finos.org

CNCF's TAG Security & Compliance w/ Brandt Keller

Brandt Keller sat down with me to chat through the latest efforts happening in CNCF's Technical Advisory Group for Security and Compliance. Brandt is a CNCF Ambassador, Technical Lead of CNCF's TAG Security & Compliance, and Software Engineer at Defense Unicorns.

Baseline w/ Ben Cotton

After a particularly lengthy working session preparing for the next release of the Open Source Project Security Baseline, Ben and I stop to drop some general knowledge and updates about that initiative. Ben is the Open Source Community Lead at Kusari. You can pick up a copy of his book here: https://pragprog.com/titles/bcosp/program-management-for-open-source-projects/ And you can read more about the Baseline here: https://baseline.openssf.org

Season 2 Trailer

This trailer received absolutely no quality control and should be consumed at your own risk. Here's what you can expect from the second season season of ZBG.