Skip to content

Commit

Permalink
final candidates
Browse files Browse the repository at this point in the history
  • Loading branch information
@hythloda
hythloda authored Dec 16, 2023
1 parent 1efca60 commit b4e8b11
Show file tree
Hide file tree
Showing 2 changed files with 42 additions and 17 deletions.
22 changes: 22 additions & 0 deletions elections/OpenSSF-TAC-GB-Nomiations-2024.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -90,4 +90,26 @@ practices. I also am a founding member of the Sigstore TSC where we have built a
As part of the OpenSSF TAC, I would continue to bring a breadth of experience and industry & academic connections to bear to help accelerate the impact of the various working groups. I am eager to support the OpenSSF's continued growth as both a forum for evangelizing best practices and as an sponsoring organization for projects that are laser-focused on helping OSS communities and users improve their security posture.
</td>
</tr>
<tr>
<td>Marcela Melara
</td>
<td>Pronouns: SHe/Her
<p>
<p>
Company: Intel
<p>
<p>
<a href="https://github.com/marcelamelara">GitHub</a> <p>
<p>
<a href="https://www.linkedin.com/in/marcela-melara-285a4678/">LinkedIn</a>
</td>
<td>Marcela is lead software supply chain researcher at Intel Labs. She draw on enterprise, open-source and academic collaborations to understand unique challenges, develop practical solutions and anticipate salient future problems. Serving on the OpenSSF TAC would allow her to support such cross-sector collaborations with an emphasis on holistic solutions.
<p>
Her main contributions to OpenSSF have been through the SCI WG. Since 2020, she has helped develop and promote the SLSA framework as a SIG member and OpenSSF Tech Talk panelist. She also co-led a new SLSA workstream enabling trusted hardware for enhanced build integrity. As a core maintainer for the CNCF in-toto project on supply chain attestation, she brought insights and connections from other areas of OSS. She will work on opportunities for fostering closer collaboration with CNCF communities via the OpenSSF TAC. As Governing Board chair of both CNCF and OpenSSF, I'll work closely with her to make this a reality.
<p>
She is eager to contribute to newer OpenSSF initiatives in 2024. The holistic best practices of the Security Toolbelt strongly align with my research approach. The DEI WG’s work to create a community in which underrepresented folks feel empowered to contribute their ideas is vital. Understanding the impact of emerging areas like GenAI on OSS security and developing suitable solutions are interesting challenges for the AI/ML Security WG.
<p>
While these initiatives each cover very distinct topics, she believes they are all crucial for achieving long-term OSS security. Driving work that ensures all sectors are ready to tackle the big supply chain problems of today and tomorrow is why she seeks to join the OpenSSF TAC.
</td>
</tr>
</table>
37 changes: 20 additions & 17 deletions elections/OpenSSF-TAC-Nomiations-2024.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -250,42 +250,45 @@ With extensive experience in open-source software development and management, pa
</td>
</tr>
<tr>
<td>Justin Cappos
<td>John Kjell
</td>
<td>Pronouns: He/Him
<p>
<br>
Company: New York University
Company: TestifySec
<p>
<p>
<a href="https://github.com/JustinCappos">GitHub</a> <p>
<a href="https://github.com/jkjell">GitHub</a> <p>
<p>
<a href="https://www.linkedin.com/in/john-kjell/">LinkedIn</a>
</td>
<td>I'm an active participant in the LF and in software supply chain security. I am a creator of the CNCF graduated project TUF and the incubating project in-toto. I am also a creator of the JDF and IEEE/ISTO standardized project Uptane, which deals with securing updates for automobiles. I am a creator of two OpenSSF sandbox projects, gittuf and SBOMit as well. My dissertation work was in designing the first package manager for the cloud and led to improvements in YaST, YUM, Apt, and PACMAN. I am also a Tech Lead in CNCF's TAG Security, where I facilitate security assessments for CNCF projects.
<td>John's candidacy for the Technical Advisory Council (TAC) at OpenSSF is driven by two core objectives: firstly, to contribute to the education of the community on security best practices, maximizing current technological capabilities, and secondly, to facilitate and contribute to the development of innovative solutions for emerging security challenges.
<p>
John's engagement with OpenSSF began with his contributions to Project Sigstore. He has since actively contributed to the SBOMit project, Supply Chain Integrity (SCI) Working Group, SCI Positioning SIG, the SLSA Specification, and the Security Toolbelt. Beyond OpenSSF, he maintains Witness and Archivista, sub-projects of in-toto, under the CNCF. His role in the CNCF TAG Security Supply Chain Security Working Group further showcases his commitment to this domain.
<p>
With extensive experience in software engineering and management, John has built open-source and commercial products from scratch. This experience equips him with vital skills for the TAC role, including community building, mentorship, feedback integration, problem analysis, and effective communication with stakeholders. John led the initial development of supply chain security features for VMware's Tanzu Application Platform and currently serves as the Director of Open Source at TestifySec, focusing on enabling supply chain security for all.
<p>
I'm a big believer in open source and in the free exchange of ideas. I don't think any organization or group has a monopoly on good ideas and I think that all should be treated fairly and equally. I believe that a greater representation for vendor-neutral, security-focused voices in the OpenSSF will strengthen the TAC and the OpenSSF overall.
John’s blend of practical experience, active contributions to projects, and experience in supply chain security make him an ideal candidate for the TAC, ready to contribute to OpenSSF’s mission.
</td>
</tr>
<tr>
<td>John Kjell
<tr>
<td>Georg Kunz
</td>
<td>Pronouns: He/Him
<p>
<br>
Company: TestifySec
Company: Ericsson
<p>
<p>
<a href="https://github.com/jkjell">GitHub</a> <p>
<a href="https://github.com/gkunz">GitHub</a> <p>
<p>
<a href="https://www.linkedin.com/in/john-kjell/">LinkedIn</a>
</td>
<td>"John's candidacy for the Technical Advisory Council (TAC) at OpenSSF is driven by two core objectives: firstly, to contribute to the education of the community on security best practices, maximizing current technological capabilities, and secondly, to facilitate and contribute to the development of innovative solutions for emerging security challenges.
<a href="https://www.linkedin.com/in/georg-kunz/">LinkedIn</a>
<p>
John's engagement with OpenSSF began with his contributions to Project Sigstore. He has since actively contributed to the SBOMit project, Supply Chain Integrity (SCI) Working Group, SCI Positioning SIG, the SLSA Specification, and the Security Toolbelt. Beyond OpenSSF, he maintains Witness and Archivista, sub-projects of in-toto, under the CNCF. His role in the CNCF TAG Security Supply Chain Security Working Group further showcases his commitment to this domain.
<p>
With extensive experience in software engineering and management, John has built open-source and commercial products from scratch. This experience equips him with vital skills for the TAC role, including community building, mentorship, feedback integration, problem analysis, and effective communication with stakeholders. John led the initial development of supply chain security features for VMware's Tanzu Application Platform and currently serves as the Director of Open Source at TestifySec, focusing on enabling supply chain security for all.
<p>
John’s blend of practical experience, active contributions to projects, and experience in supply chain security make him an ideal candidate for the TAC, ready to contribute to OpenSSF’s mission."
</td>
<td>
I am an active contributor to open source projects and communities, including LF Networking and the TODO Group, for more than 10 years. In the past two years, I have been specifically involved in the OpenSSF, participating in and contributing to Technical Initiatives such as the C/C++ Hardening Guide, the Security Toolbelt, SBOM Everywhere, the Governance Committee, and others. Moreover, have I been speaking about supply chain security in the context of public policy at multiple events throughout 2023.
<p>
As a member of the OpenSSF TAC, I will commit my time and expertise to facilitate and enable our Technical Initiatives - to make them, and the OpenSSF as a whole, successful. This means building on top of the excellent work of refining community processes done by the current TAC. With this solid foundation in place, I want to help the OpenSSF to enter a new phase, which is focusing on broad adoption of our work - both in open source communities as well as in end user organizations. Working in an OSPO, my role is to bridge between groups and facilitate collaboration - and this is what I want to bring to the OpenSSF TAC.
</td>
</tr>
</table>

0 comments on commit b4e8b11

Please sign in to comment.