John Speed Meyers

icon indicating a website link johnspeedmeyers.com

icon company @chainguard-dev icon location Virginia, USA icon location Head of Chainguard Labs. Likes: open source software security, software supply chain security, @wolfi-dev

Results 33 issues of John Speed Meyers

Add a Chainguard Images container SBOM and associated test

Add a Chainguard Images SBOM and an associated test [Full disclosure: I work at Chainguard. The Chainguard engineering team uses `ntia-conformance-checker` to check the conformance of some Chainguard Images SBOMs...

enhancement

Determine Sub-Scores for Scorecard Results of this Repo and Assess if Any Actions Should Be Taken

3 comment

These is now a Scorecard score on the README. I'd be curious to run the tool on this repo and assess what the different sub-scores are. Additionally, I'd be curious...

good first issue
security

[BUG] CVEs in Versions of Current Dependencies

While [packaging](https://github.com/wolfi-dev/os/pull/31311) `opensearch-k8s-operator` I noticed a handful of CVEs in current dependency versions. Specially, I came across these CVEs in the noted packages: ``` 📦 golang.org/x/net v0.13.0 (go-module) High CVE-2023-39325...

bug
untriaged