Arnaud Le Hors is Senior Technical Staff Member of Open Technologies at IBM, working on a range of technologies with a primary focus on Open Source supply chain security. Arnaud has been working on standards and open source for over 30 years, both as a staff member of the X Consortium and W3C, and as a representative for IBM.
Arnaud Le Hors is Senior Technical Staff Member of Open Technologies at IBM, working on a range of technologies with a primary focus on Open Source supply chain security. Arnaud has been working on standards and open source for over 30 years, both as a staff member of the X Consortium and W3C, and as a representative for IBM. He has been involved in every aspect of the open technology development process: technical, strategic, political, and legal. Arnaud was editor of several key web specifications including HTML and DOM and was a pioneer of open source with the release of libXpm in 1990. Arnaud has participated in several prominent open source projects including the X Window System and Xerces, the Apache XML parser. Arnaud is the main representative for IBM at W3C and INCITS, a member of the Hyperledger Technical Oversight Committee and contributor to OpenSSF.
Bob Callaway is the leader of Google’s Open Source Security Team (GOSST), spearheading initiatives to bolster the security of open source software, benefiting both Google and the global community.
Bob Callaway is the leader of Google’s Open Source Security Team (GOSST), spearheading initiatives to bolster the security of open source software, benefiting both Google and the global community. Under his leadership, the GOSST team develops and contributes to projects that address critical areas such as supply chain integrity, observability, and vulnerability management. GOSST also plays a pivotal role in managing essential internet infrastructure services, including OSV, Sigstore, and Certificate Transparency logs. Bob’s influence extends to advisory positions in key organizations: he serves as a member of the Technical Advisory Council for the OpenSSF, is a co-founder and technical steering committee member of Sigstore, and represents Google on the Alpha-Omega project leadership team. His extensive experience includes engineering and leadership roles at Red Hat, NetApp, and IBM. Bob holds a PhD in Computer Engineering from NC State University, where he also shares his expertise as an adjunct assistant professor in the ECE department.
Georg has been a member of the OpenSSF technical community since 2022. During this time, he has actively participated in various TIs, committees and working groups, such as the Best Practices WG, the End Users WG, but also the Governance Committee and the Public Policy Committee.
Georg has been a member of the OpenSSF technical community since 2022. During this time, he has actively participated in various TIs, committees and working groups, such as the Best Practices WG, the End Users WG, but also the Governance Committee and the Public Policy Committee.
Within the Best Practices WG, Georg has facilitated the creation of two SIGs: the C/C++ Compiler Options Hardening Guide and the Python Secure Coding Guide. He has also accepted the role of co-chair of the Best Practices WG, additionally contributing to the OpenSSF’s activities focusing on upcoming EU cyber regulation.
Jautau “Jay” White is a seasoned Information Security executive with over 15 years of leadership experience. He excels in building world-class teams and developing high-impact programs that effectively reduce compliance risks and strengthen Information Security and Cybersecurity measures. Jay is known for his people-centric approach, often evangelizing Information Security as a vital business function. This approach has been instrumental in gaining buy-in and influencing adoption at all organizational levels.
Jautau “Jay” White is a seasoned Information Security executive with over 15 years of leadership experience. He excels in building world-class teams and developing high-impact programs that effectively reduce compliance risks and strengthen Information Security and Cybersecurity measures. Jay is known for his people-centric approach, often evangelizing Information Security as a vital business function. This approach has been instrumental in gaining buy-in and influencing adoption at all organizational levels.
His passion for empowering his team is evident. Jay ensures that his team is equipped with the right tools for growth, engagement, and preparedness for any challenge. His educational background is extensive and impressive, holding a PhD, MBA, and MS, along with numerous professional certifications in Information Security and IT, such as CISM, CISSP-ISSAP, CDPSE, CCNA, and ITIL.
Jay’s expertise is not limited to technical skills; he is fluent in Spanish and possesses a deep understanding of agile SDLC processes. He is reputed for his ability to connect enterprise-wide teams and bridge gaps, making him a valuable asset to any organization. His leadership style and professional acumen position him as a prominent figure in the field of Information Security.
Dr. Marcela Melara is a Research Scientist in the Security and Privacy group at Intel Labs. Her research focuses on solutions for trustworthy distributed systems, and she leads a number of internal, academic and open-source efforts on software supply chain security. Marcela’s work appears in various publications, conferences and patents, and has been adopted in several open-source and commercial software products.
Dr. Marcela Melara is a Research Scientist in the Security and Privacy group at Intel Labs. Her research focuses on solutions for trustworthy distributed systems, and she leads a number of internal, academic and open-source efforts on software supply chain security. Marcela’s work appears in various publications, conferences and patents, and has been adopted in several open-source and commercial software products.
Michael Lieberman is co-founder and CTO of Kusari. His passion is in applying his expertise to use cases where privacy and security are paramount. Mostly recently he has been focused on work within the software supply chain security space. He is also highly committed to open-source, having co-created projects like GUAC and FRSCA, along with having co-lead white papers like the CNCF’s Secure Software Factory Reference Architecture.
Michael Lieberman is co-founder and CTO of Kusari. His passion is in applying his expertise to use cases where privacy and security are paramount. Mostly recently he has been focused on work within the software supply chain security space. He is also highly committed to open-source, having co-created projects like GUAC and FRSCA, along with having co-lead white papers like the CNCF’s Secure Software Factory Reference Architecture. He is an OpenSSF SLSA steering committee member, tech lead for the CNCF Security Technical Advisory Group (STAG), and formerly co-chaired the CNCF FinServ User Group. His career has led him from startups to multinational financial institutions and everything in between.
Michael Scovetta has over 20 years of experience in software security—10 of which have been dedicated to open source. Michael brings a wealth of knowledge and a unique perspective to one of the most critical challenges we face today.
Michael Scovetta has over 20 years of experience in software security—10 of which have been dedicated to open source. Michael brings a wealth of knowledge and a unique perspective to one of the most critical challenges we face today.
Michael is a proud co-founder and co-lead of the Alpha-Omega project. In addition to Alpha-Omega, he’s participated in multiple working groups, led the Metrics & Metadata WG, authored the Threats, Risks and Mitigations white paper, and drove the creation of the security-reviews project.
Across the wider LF (Linux Foundation) ecosystem, Stephen has the pleasure of serving as a member of the OpenSSF Governing Board, the Kubernetes Steering Committee, and the TODO Group Steering Committee. Previously, he was one of the Program Chairs for KubeCon / CloudNativeCon, the cloud native community’s flagship conference.
For Kubernetes, Steven has co-founded transformational elements of the project, including the KEP (Kubernetes Enhancements Proposal) process, the Release Engineering subproject, and Working Group Naming. Stephen has also previously served as a chair for both SIG PM and SIG Azure.
He continues his work in Kubernetes as a Steering Committee member and a Chair for SIG Release.
Across the wider LF (Linux Foundation) ecosystem, Stephen has the pleasure of serving as a member of the OpenSSF Governing Board and the TODO Group Steering Committee.
Previously, he was a CNCF (Cloud Native Computing Foundation) TAG Contributor Strategy Chair and one of the Program Chairs for KubeCon / CloudNativeCon, the cloud native community’s flagship conference.
He is a maintainer for the Scorecard and Dex projects, and a prolific contributor to CNCF projects, amongst the top 40 (as of writing) code/content committers, all-time.
In 2020, Stephen co-founded the Inclusive Naming Initiative, a cross-industry group dedicated to helping projects and companies make consistent, responsible choices to remove harmful language across codebases, standards, and documentation. He leads the Community/Open Source workstream and maintains the initiative’s infrastructure.
He has previously held positions at VMware (via Heptio), Red Hat, and CoreOS.
Stephen is based in New York City.
Zach first got involved in securing open source at Python Packaging sprints, and more recently helped release npm's package provenance using Sigstore. He works at GitHub as a Principal Engineer and is looking forward to continually improving the security of open source software.
Zach first got involved in securing open source at Python Packaging sprints, and more recently helped release npm’s package provenance using Sigstore. He works at GitHub as a Principal Engineer and is looking forward to continually improving the security of open source software.
