Zachary Newman
Former Principal Research ScientistChainguard
Written by Zachary Newman
Stemming the tide of false positive vulnerabilities
researchTaming bad Python packages: Assessing Python malware detectors with a benchmark dataset
research
Good MLOps is good ML supply chain security
engineeringIntroducing "Speranza": Enhancing software signing with privacy and usability
researchMove over, Dockerfiles! The new way to craft containers
engineeringThe role of attestations in a secure software supply chain
productAre Kubernetes Validating Admission Policies the end of admission controllers?
engineeringWhat the fuzz? Better coding through randomized testing
engineeringNot all that’s signed is secure: Verify the right way with TUF and Sigstore
engineering