Working on 🐧 and open source software
Joined June 2007
- Tweets1.8K
- Following702
- Followers2.3K
- Likes3.2K
José Miguel Parrella (JMP) retweeted
The ntp package has been replaced by ntpsec. The Debian default for the system clock is now systemd-timesyncd. We also inclde chrony and openntpd. #ReleasingDebianBookworm #Debian12 #Debian dlvr.it/SqTyhy
José Miguel Parrella (JMP) retweeted
Live demoing how to use @OpenPolicyAgent Gatekeeper external data feature together with Ratify to validate license and vulnerabilities on app deployment. @jrrickard
José Miguel Parrella (JMP) retweeted
🎉🎉🎉 So excited to see this land. It's been great collaborating with @OCI_ORG on getting the specs updated to facilitate the storage and distribution of signatures, SBOMs and software supply chain security artifacts. Try it out today on ACR techcommunity.microsoft.com/…
José Miguel Parrella (JMP) retweeted
ORAS 0.15 has evolved into a fully functional OCI registry client. It provides fine-grained capabilities to alter the content of @OCI_ORG supply chain artifacts. Check out this blog by @FeynmanZhou and Yi to learn how to convert Docker image to OCI image:
oras.land/blog/oras-0.15-a-f…
José Miguel Parrella (JMP) retweeted
This MIT CS class teaches you things that all the other classes don't teach you, like...
🖥️ Shell tools and scripting
🖥️ Vim
🖥️ Data wrangling
🖥️ Command-line environment
🖥️ Version control
Watch all 11 lectures for free here: bit.ly/MissSemester
José Miguel Parrella (JMP) retweeted
The @ietf has approved the #SCITT (Supply Chain Integrity Transparency and Trust) as an official working group. mailarchive.ietf.org/arch/ms…
Special thanks to @eliotlear, @shingou, @rahmenwerk, @OR13b, @mprorock, @rjb4standards, @kaywilyums amongst many others.
José Miguel Parrella (JMP) retweeted
We’re super excited about bringing GitHub Advanced Security and Defender for DevOps to Azure DevOps customers! aka.ms/AAi8gek #MSIgnite
José Miguel Parrella (JMP) retweeted
My new experiment: "repro-get": reproducible apt, dnf, and apk, with content-addressing.
github.com/reproducible-cont…
TL;DR:
```
$ cat SHA256SUMS
35b150... pool/main/h/hello/hello_2.10-2_amd64.deb
$ repro-get install SHA256SUMS
```
Supports OCI and IPFS as blob storages.
José Miguel Parrella (JMP) retweeted
Last week Why the SBOM Frenzy Is Premature, this week Why SCA for Security is Really Hard which explains why most vulnerability data is not up to the job.
eu1.hubs.ly/H01W-v30
José Miguel Parrella (JMP) retweeted
This blog by @FeynmanZhou demonstrates how to copy a @OCI_ORG image from a public registry MAR to a private registry ACR, then attach SBoM and discover the reference in a tree graph. We will also share the ORAS use cases in ECR and GAR soon. Stay tuned!
oras.land/blog/oras-0.14-and…
José Miguel Parrella (JMP) retweeted
Very neat: new browser plugin that shows if a repository is archived on @SWHeritage or not (if it is, you can cite it and/or use a SWHID to refer to code at a granular level: docs.softwareheritage.org/de…)
José Miguel Parrella (JMP) retweeted
Very exciting to see @Microsoft open source their internal SBOM generation tool. Would love to hear what you think of it.
devblogs.microsoft.com/engin…
Just Announced: La Última Vuelta World Tour 🔥
@daddy_yankee brings his farewell tour to Seattle on Aug 4! Tickets on sale this Friday at 10AM 🎟→ bit.ly/cpadytw
