Contributions posts

Software supply chain security

Last updated Contributions Software supply chain security

I maintain Awesome Software Supply Chain Security, a popular and comprehensive reference of tools, trends, and challenges in the software supply chain security.

I’ve built Linux distributions of various sizes, from a consumer-focused one that has millions of end users to custom-built Linux desktop distributions for the enterprise. From there, I transitioned to researching how distribution package management, release cadence, and security are relevant to the open source software supply chain problem.

Agent runtime integrity and workload identity

Last updated Contributions Agent Runtime Security

I maintain Awesome Agent Runtime Security, a Linux-focused curation of long-form writing, specifications, and technologies at varying levels of maturity. It collects approaches to kernel- and hypervisor-enforced agent isolation, secrets injection, and deriving credentials from an agent’s measured state.

Related writing and resources:

Earlier works

Last updated Contributions

Most of my writing lives in GitHub Gists or LinkedIn Articles. I have presented at several conferences from Argentina to Tunisia, with slides often available on Speaker Deck. Here are some selected earlier works: