scroll

OSS Supply Chain Security: Security for Ruby

Good news everyone! We are gathering for another snug Ruby evening! Wherever you are, we will be most happy to see and hear from you. Join our discussion on 16th October, 19:00 (Kyiv, GMT+3).

Welcome Maciej Mensfeld!

We thank and welcome our speaker - Maciej Mensfeld, a software architect and engineer working with Castle.io, with vast experience in a wide variety of business applications built using multiple Ruby frameworks. Particularly interested in code quality and Ruby-based applications' security. Active OSS contributor and maintainer of various projects including Karafka, dry-rb libraries, and Diffend.io project.

Twitter Github

Topic: OSS Supply Chain Security for Ruby

Ruby gems aren't fundamentally safe. Several gems were infected last year, and constant attempts are being made to do the same with others. It's not only the execution that is a problem but the installation process as well.

Are there any ways for OSS users to regain control over what is being executed on their machines and their servers? Are there any ways for libraries’ maintainers to provide higher transparency over what they ship?

Come, find out and let's exploit the Ruby gems world together!