From the "TMI about my personal life" file. here's Coming Out 2.0: medium.com/@webchick/comi #pridemonth
Pinned Tweet
Follow
webchick at Aiven 
@webchick
webchick at Aiven 🦀’s Tweets
Absolutely love this photo of and me at our company meeting a few weeks ago. So happy to be working with rad human!
4
1
50
Ad algorithms are funny.
My partner, who could not possibly be LESS enthusiastic about technology, gets ads from my employers. 😂
Meanwhile, I get ads for scheduling systems for therapists running their own practice. 🤔
Which, honestly, is in part what community work is. 😂
7
Attended GSoC Contributor Summit 2023 today and what an absolutely amazing experience it was!✨
Got to know about the experiences and journeys of the mentors, previous contributors, and org admins, and their advice on making the most out of the program.💫
-🧵-
4
6
66
Show this thread
68
731
3,254
0:11
907 views
4
1
36
URGENT ANNOUNCEMENT: if you are at #OSSummit head to the sponsor hall for cake pops, cupcakes (celebrating ’s 25th anniversary) and a DIY poutine situation! 🤩
3
2
18
Awesome stuff from in the speed mentoring session on #community at #OSSummit
- Check out the book Forge Your Future with Open Source by for great tips on finding a project to contribute to.
- Also check out which focuses on community metrics
2
2
13
6
Interested in starting an #OpenSource Programs Office (#OSPO) in your organization?
- opensource.google/documentation/ is where has documented their best practices.
- is a collection of OSPOs in various companies sharing best practices.
#OSSummit
4
7
Don’t miss the #AskTheExpert sessions at #OSSummit featuring awesome people like !
Find them outside room 120 (through the sponsor hall).
1
8
It was great to meet you, Courtney! 😄
If any #Drupal folks are interested in speaking/attending , they’re actively seeking submissions from folks outside the #WordPress community and will have lots of contributors in attendance! Great opportunity to share learnings!
Quote Tweet
I found another #opensource CMS person at #OSSummit. @webchick is a long-time #Drupal contributor. We swapped stories of #WordPress & Drupal communities.
6
19
I found another #opensource CMS person at #OSSummit. is a long-time #Drupal contributor. We swapped stories of #WordPress & Drupal communities.
2
25
Because of all today’s fun and shenanigans I soooorta fell off live-tweeting #openssfday this afternoon. 🙈
But fret not! Videos will be available on YouTube page in a couple weeks!
And finally, big thanks to for hosting the LGBTQIA+ gathering tonight!
It was in a great location () right in the heart of West End. 🏳️🌈 Also there were MILKSHAKES! 😍(which I forgot to take pictures of due to talking to awesome people 🙈) #OSSummit
5
2
25
Also got on mic with and from the podcast at #OSSummit for the first time since our #Drupal discussion way back in 2018! 😄 changelog.com/podcast/321
We discussed #MaintainerMonth topics: sustainability, licensing, succession planning, and more!
2
5
18
1
8
1
12
More intelligent #devops pipelines are possible, with #security policies built in, self-healing, and more.
#openssfday #ossummit
1
Show this thread
Excited to see #SBOMs starting to take off, communities around them forming, people asking the right questions, focused on quality, how to use them, understand where they fit.
Also looking forward to consumption of data in future of #devops pipelines.
#openssfday #ossummit
1
1
3
Show this thread
Excited to see #SBOMs adhere to standards, which is good because "the auditors are coming!" especially for #AI applications. ;-)
Also interesting to think of #SBOMs being applied to software ethics.
#openssfday #ossummit
1
Show this thread
But what we want to be able to do with #SBOMs: CVE comes out, we find the 4-5 applications that use it, notify all impacted teams at once.
#openssfday #ossummit
1
Show this thread
"How do you handle a 'recall' on a legacy piece of software?"
Most orgs do not have SBOMs aggregated at federal level. So if one particular package gets CVE, and one team using it, they'll fix it. But repeat for each team.
#openssfday #ossummit
1
Show this thread
"Are there tools developers can use to help generate SBOMs?"
Broad variety of generating tools. Many open source, many very good quality. Don't need to do it yourself.
Future: Aiming to automate SBOMs everywhere. Tools should be "behind the scenes."
#openssfday #ossummit
1
Show this thread
Remember that SBOMs are just one part of the overall picture. They're meant to be machine-readable. More data = more well-defined supply chain.
Opportunity for AI-powered tools to generate / validate #SBOMs as well to reduce manual work.
#openssfday #ossummit
1
Show this thread
At a standards level, we're working on better differentiating between "required" and "nice to have" fields. However, broadly: more data = more traceability when you need it.
#openssfday #ossummit
1
Show this thread
"Today, there's a black and white view of SBOM: you must do it. But there's a nuance; for example an SBOM from embedded universe could be bigger than the executable itself. How much nuance do you think is appropriate?"
#openssfday #ossummit
1
1
Show this thread
"Today, SBOMs focus on component level, but what about rolling up to application level?"
Forthcoming version of spdx.dev will help with decomposability. Especially helpful with LLM/AI systems in your software.
#openssfday #ossummit
1
1
1
Show this thread
"Is it possible to rebuild a package in an air-gapped build system based on the SBOM?"
Depends on the level of SBOM that's generated: run-time, compiler, source code, packages...
Potentially, yes, if generating a complete set, but largely not there yet
#openssfdya #ossummit
1
Show this thread
As far as software quality, a number of factors come into play: Binary? information will be there, can see if it's complete or not. Container image? Now you need operating system, language dependencies as well.
#openssfday #ossummit
1
Show this thread
Academic field interested in this problem space too, and trying to come up with metrics to help ensure #SBOM integrity. For example: Can you rebuild the code base as-is from the SBOM? #openssfday #ossummit
1
Show this thread