Jeffmendoza Readme

Currently interested in dependency scanning and management for supply chain security and legal compliance.

Catalog of open source contributions past and present, and also public speaking and workshops:

Current

• Co-Chair of the OpenSSF Securing Critical Projects Working Group
• Member of the Steering Committee for Scorecard, an OpenSSF Incubating project
• Maintainer of Allstar, part of Scorecard, an OpenSSF Incubating project
• Maintainer of GUAC, an OpenSSF Incubating project
• Member of the Technical Steering Committee for ClearlyDefined, an OSI project
• Contributor to Ko, a CNCF sandbox project

Public Speaking / Workshops

• KubeCon EU 2025: Why Don’t We Have Both? Track Build- and Run-time Information for Security With Kubescape and GUAC
• FOSDEM 2025 SBOM devroom: Discover Dependency License Information Using SBOMs and ClearlyDefined
• SOSS Fusion 2024: Scorecard at Scale: Old and New Possibilities for Lifting Security on All Repositories
• SOSS Community Day North America 2024: What Makes a Project Critical? Discovering & Evaluating Popular Open Source Software
• OpenSSF Day North America 2022: Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities 2nd copy
• Open Source Summit North America 2022: Using OpenSSF's Allstar to Secure Your Organizations GitHub Repositories
• FOSDEM 2020 Rust devroom: Discover dependency license information with ClearlyDefined
• OSCON 2016: Kubernetes: From scratch to production in 2 days Workshop
• RailsConf 2016: Rails on Google App Engine Workshop
• KubeCon 2015: Introduction to Kubernetes Workshop
• GopherCon 2015: Go on Sandstorm Lightning Talk
• DockerCon 2014: "Easy Docker on Microsoft Azure by Jeff Mendoza & Nik Garkusha (Microsoft)" (Recording no longer available)
• ChefConf 2014: Jeff Mendoza & Madhan Arumugam Ramakrishnan, "Cooking In The Cloud"
• Channel 9, Cloud Cover: Docker on Azure
• Nagios Con 2014: Monitoring Microsoft Azure with Nagios

Past

• Maintainer of ClearlyDefined, an OSI project
• Contributor to Istio
  • Service graph visualization
  • Fluentd logging output adapter
  • Grafana dashboard improvements
  • Integration with GCP/Stackdriver Context Graph
• Kubernetes
  • Sample config and demo apps in examples/ directory, and later website repo
  • Workshops for learning K8s on GCP, AWS, and locally.
  • Initial support for running on Azure
• Docker machine support for Azure and Hyper-V
• Chef: Knife Azure contributions, and Azure Cookbooks
• Vagrant: Contributed to Azure and Hyper-V support
• OpenSSL: ALPN support patch (rt.openssl.org is gone...)
• Fog Azure
• Nagios: Plugin for monitoring Azure VMs