Dejan Bosanac

Experienced software engineer | Intersection of AI and Security | Software Supply chains | Open source and communities
Work @RedHat

[Dejan Bosanac @dejanb]

@hjluks Wander that is 🙂

[Dejan Bosanac @dejanb]

@hjluks You can’t go wrong any direction you take. If first time in the city, just wonder through the inner city?

[Heapcon @Heapconf]

🔐 Ever wondered where vulnerability data really comes from?

At #Heapcon2025, Dejan Bosanac dives into the world of software vulnerabilities: data sources, formats, and how to use them to secure your software supply chain.

📅 Oct 30–31 | Belgrade
🎟️ https://t.co/fhw1MuTkFG

[OpenSSF @openssf]

Trustify is now part of GUAC! 🎉
Together they’re tackling SBOM ingestion, compliance & knowledge graphs for stronger open source security.

Hear from Ben Cotton (Kusari) & @dejanb (Red Hat) at #OpenSSFCommunity Day EU → https://t.co/033EwWx1HY

Details 👉https://t.co/gZcfQKt7wU

[Mihai Maruseac @mihaimaruseac]

OpenSSF turns 5 today! It's one of the most welcoming and friendly communities I've been in, with tons of technical expertise and solving real problems of today.

[Heapcon @Heapconf]

Last year Dejan Bosanac shed some light on a relatively new field called Software supply chain security with his incredible talk "How is this sausage made"

▶️ Check it out the talk on our YT
🎫 Tickets for Heapcon 2024 on sale now!

[Ashesh Badani @asheshbadani]

Excited to announce the GA of @RedHat Trusted Software Supply Chain - in time for @RedHatSummit ! https://t.co/PtUK3IBfaL

[puerco @puerco]

Trustification is a project to collect supply chain security data, @dejanb explains it's architecture at the #FOSDEM #SBOM devroom. #fosdem2024

[Heapcon @Heapconf]

Have you ever wondered about the intricate process behind crafting secure software products? 🤔

Dive deep into the significance of verified components and strategies for safeguarding users and customers. 🙌

[Dejan Bosanac @dejanb]

@lumjjb Thanks Brandon. It's a great community indeed. Onwards!

[Brandon Lum @lumjjb]

Working on 🥑 GUAC (https://t.co/YaofftTEaM) reminds me why I enjoy working on Open Source! We’ve gotten some great community contributions since our v0.1 launch. Here are some cool contributions from the community, if you like them do give us a star - we’re close to 1k!! 🧵1/n

[Dejan Bosanac @dejanb]

I'll be talking with KBE Insider folks later today about Edge computing topics
https://t.co/tVBVPNdn47
Join in if you are interested!

[Dejan Bosanac @dejanb]

@monkchips There's a lot of work being done around GraphQL and supply chain security
https://t.co/J9U0iZV4Ib
It's an interesting use case, still early days though

[Dan Lorenc @lorenc_dan]

A @projectsigstore RFC for @rustlang!

https://t.co/tEQgaWBlAv

[Dan Lorenc @lorenc_dan]

A Rust implementation of OpenVEX! https://t.co/anESroAK7f

[Chris Wright @kernelcdub]

Want to protect your data workloads from prying eyes? TEEs and confidential computing are changing data security and #DataPrivacy. Don't miss our latest episode of Technically Speaking with my guest Lily Sturmann:https://t.co/fMsGGfseMo

[Bob McW (We/Us/Our) *0fficial* @bobmcwhirter]

Just a reminder that my awesome coworkers are writing up their learnings around software supply-chain security.

https://t.co/uhjsAOZfMs

[wasmedge @realwasmedge]

The Wasm runtime included in Fedora 37 and RHEL 9 is WasmEdge from the @CloudNativeFdn 🚀

[Drogue IoT @DrogueIoT]

We just released Drogue Cloud 0.11.0!

Are you curious about CoAP with DTLS, TLS-PSK, or #digitaltwin? Then maybe take a few minutes and read our release blog post:

https://t.co/aesxJ51qIa

[Jens Reimann / @[email protected] @ctron]

A few slides, giving a quick introduction to the @DrogueIoT cloud side of things: https://t.co/AMbrURzfIL