SigstoreCon Supply Chain Day 2024

Attending this event?

SigstoreCon Supply Chain Day 2024

November 12, 2024 | Salt Lake City, Utah
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for SigstoreCon Supply Chain Day 2024 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Mountain Standard Time. To see the schedule in your preferred timezone, please select from the drop-down located at the bottom of the menu to the right.

The schedule is subject to change.

8:00am MST

Registration + Badge Pick-up Alpine Foyer

9:00am MST

Keynote: Welcome & Opening Remarks - Speaker To Be Announced Alpine

9:10am MST

Keynote: Sigstore's Future - Bob Callaway, Head of Open Source Security Team, Google AlpineBob Callaway

9:15am MST

Keynotes To Be Announced Alpine

9:40am MST

Trends and Ecosystem Dynamics in Sigstore - Chinenye Okafor, Purdue University AlpineChinenye Okafor

10:15am MST

The Next 5 Years of Supply Chain Security on PyPI - William Woodruff, Trail of Bits AlpineWilliam Woodruff

10:45am MST

11:00am MST

Cosign: Keeping up with the Client Libraries - Zach Steindler, GitHub AlpineZach Steindler

11:35am MST

Rekor V2: What's Next for Sigstore's Transparency Log - Hayden Blauzvern & Colleen Murphy, Google AlpineHayden Blauzvern • Colleen Murphy

12:10pm MST

The Challenges of Building a Sigstore Implementation from Scratch - Samuel Giddins, Ruby Central AlpineSamuel Giddins

12:40pm MST

Lunch Break Alpine

1:25pm MST

Rewriting Root-Signing -- a Deep Dive Into Sigstore Trust Root Delivery - Jussi Kukkonen, Google AlpineJussi Kukkonen

2:00pm MST

Papers, Please - Scrutinizing AI Model Creation - Parth Patel, Kusari & Mihai Maruseac, Google AlpineMihai Maruseac • Parth Patel

2:35pm MST

Charting the Path to Software Integrity: Red Hat’s Journey with Sigstore - Lance Ball & Brian Cook, Red Hat AlpineLance Ball • Brian Cook

3:10pm MST

Understanding the Identity of a CI Platform - Richard Fan, N/A AlpineRichard Fan

3:27pm MST

TUF Love for Your Containers: Preventing Rollback Attacks - Jonny Stoten, Docker AlpineJonny Stoten

3:40pm MST

3:55pm MST

Sigstore & TUF Conformance Testing: Are Clients Playing by the Rules? - Adam Korczynski, Ada Logics & Jussi Kukkonen, Google AlpineAdam Korczynski • Jussi Kukkonen

4:30pm MST

CISA: Casting New Light on Supply Chain Artifacts - Tim Pepper, CISA AlpineTimothy Pepper

5:05pm MST

Sigstore-Powered Hunting: Uncovering North Korean APT Attacks on the OSS Supply Chain - Poppaea McDermott, Stacklok AlpinePoppaea McDermott

5:40pm MST

The SBOM Revolution: How Sigstore, in-Toto, SBOMit, and Bomctl Are Changing the Game - Ian Dunbar-Hall, Lockheed Martin & Marc Frankel, Manifest AlpineIan Dunbar-Hall • Marc Frankel