BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//DevOpsChat//Events//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:01a1989d-2cca-70e3-9f33-4bd936ecf6f1@www.devopschat.co
DTSTAMP:20261106T184058Z
DTSTART:20220621T150000Z
DTEND:20220621T160000Z
SUMMARY:DevOpsDC Hybrid Collab Meetup : Introduction to the Sigstore Projec
 t
DESCRIPTION:We are so glad to collab with [Arlington & DC Cloud Meetup](htt
 ps://www.meetup.com/dc-arlington-cloud-meetup/) and [AWS Cloud Security NO
 VA](https://www.meetup.com/aws-security/) again! Hosted right back at the 
 [Matrix Group International ](https://www.matrixgroup.net/)Offices!\n\nMan
 y highly visible and prominent software supply chain attacks have caused t
 eams to rethink how their software is built and delivered. The sprawl of o
 pen source ecosystems has exacerbated the challenge of vetting software ar
 tifacts. One strong countermeasure is [sigstore](https://www.sigstore.dev/
 )\, a free keyless signing service for developers that improves the securi
 ty of the software supply chain through integrity verification and non-rep
 udiation of artifacts as they pass from dev to prod.\n\nThis talk will cov
 er some of the key technologies that make sigstore possible so developers 
 can generate ephemeral keys that never even touch disk with just an OIDC l
 ogin. We will also talk about how sigstore is a key component for DevOps i
 nitiatives that have supply chain objectives or are adopting frameworks su
 ch as SLSA and NIST SSDF. Finally\, we will use our imaginations to think 
 about some of the possibilities that we can build off of the sigstore comp
 onents such real time continuous compliance and immutable CI/CD audits.\n\
 n**Meet the Speaker:**\n[John Osborne](https://www.linkedin.com/in/johnfos
 borneiii/) is a Software Supply Chain Architect at Chainguard focusing on 
 end-to-end integrity of software artifacts. Most of his time is spent help
 ing customers along their software supply chain journey with SLSA or NIST 
 SSDF. He’s been active in cloud-native communities for the past 7 years.
  Prior to his arrival at Chainguard\, he spent 9 years at Red Hat\, most r
 ecently as the NA Practice Lead for DevSecOps. He also spent 7 years as th
 e Infrastructure Lead for a large U.S. Navy program and several years at a
  telco startup. He has his MS Software Engineering\, MBA\, and is also co-
 author of OpenShift In Action. He currently lives in Vienna\, Virginia.\n\
 n**Housekeeping / Logistics:**\n\n* Food & Beverage : Pizza and soft drink
 s!\n* The event will be HYBRID\; Zoom link to be shared shortly before the
  event\, most likely the day before or day of.\n* Please see the informati
 on about COVID regulations for this event.\n* Also see the notes about tra
 nsportation.\n* This is a joint meetup with 3 other local groups so RSVP q
 uickly to save your spot.\n\n**Agenda:**\n• 6:00 - 6:30 - Meet and Greet
 \n• 6:30 - 6:45 - Introductions and Announcements\n• 6:45 - 7:30 - Spe
 akers\n• 7:30 - 8:00 - Closing Remarks and Networking\n\nThank you to ou
 r sponsor [Chainguard\, Inc](https://www.chainguard.dev/)!\nApplying Zero-
 Trust principles to supply chain security to make the software lifecycle s
 ecure by default. We help organizations manage their open source and overa
 ll software supply chain security risk.\n\nCheck out the links to our [Git
 Hub](https://github.com/devopsdc/devopsdc) repository for additional detai
 ls!\nFollow us on [Twitter](https://mobile.twitter.com/devopsdc)\, [Linked
 In](https://www.linkedin.com/groups/14042407/)\, or [Slack](https://dctech
 slack.com)!\nWe value the participation of each member of the community an
 d want all attendees to have an enjoyable and fulfilling experience. To ma
 ke clear what is expected\, all delegates/attendees\, speakers\, exhibitor
 s\, organizers\, and volunteers at any DevOpsDC event are required to conf
 orm to our [Code of Conduct ](http://www.meetup.com/DevOpsDC/pages/Code_of
 _Conduct/).\n\nhttps://www.devopschat.co/meetings/devopsdc-hybrid-collab-m
 eetup-introduction-to-the-sigstore-project
URL:https://www.devopschat.co/meetings/devopsdc-hybrid-collab-meetup-introd
 uction-to-the-sigstore-project
END:VEVENT
END:VCALENDAR