I maintain Awesome Software Supply Chain Security, a popular and
comprehensive reference of tools, trends, and challenges in the software supply chain security.
I’ve built Linux distributions of various sizes, from a consumer-focused one
that has millions of end users
to custom-built Linux desktop distributions for the enterprise. From there, I transitioned to
researching how distribution package management, release cadence, and
security are relevant to the open source software supply chain problem.
I maintain
Awesome Agent Runtime Security,
a Linux-focused curation of long-form writing, specifications, and technologies
at varying levels of maturity. It collects approaches to kernel- and
hypervisor-enforced agent isolation, secrets injection, and deriving
credentials from an agent’s measured state.
Most of my writing lives in GitHub Gists or
LinkedIn Articles. I have presented at several conferences from Argentina to
Tunisia, with slides often available on
Speaker Deck. Here are some selected earlier
works: