kimweins

Host of Software Supply Chain Security podcast. Anchore SVP. Digital nomad. Geeks out on containers, security, cloud, open source, e-bikes.

[kimweins @kimweins]

Super annoyed at ESPN Plus right now. I’m on the feed to watch US Open Mixed Doubles Qualifying and they keep showing me random qualifying! WTF. I’ve missed half the match. 😡😡😡😡 #espnplus

[kimweins @kimweins]

I just updated my Apple Watch to the latest OS and the new weather app has accessibility issues. The white text on the light blue and green ring is impossible to read. Please fix! @Apple #accessibility #design #fail

[kimweins @kimweins]

Interesting that Github Copilot is losing $20 per user on its current cost of $10 a month.

This article indicates that MSFT wants to make the processing costs cheaper with new chips, but I would guess that the price of Github Copilot is likely to go up. https://t.co/ktqSYZC63g

[Vaadin @vaadin]

We're excited to reveal the winners of the 2023 Vaadin Collaboration Kit Challenge! 🎉

Thank you to everyone who participated and took the time to design and build incredible collaborative web apps! See the winners: https://t.co/MTgVJ7htdR

[kimweins @kimweins]

@starbuxman The other rule I saw from a college professor is that you are still responsible for the accuracy. Makes a lot of sense if you combine those two rules.

[kimweins @kimweins]

@spring_io @VMwareTanzu Is there a sponsorship prospectus yet? I'm not seeing anything on the website.

[Maciej Walkowiak 🍃 @maciejwalkowiak]

I regularly complain on the lack of full-stack framework for Java. There are great backend frameworks, but frontend always felt as second class citizen involving glueing together 3rd party libraries.

This isn't true anymore. Check @hillaframework

👉 https://t.co/3RRNBVOGQe

[kimweins @kimweins]

@GeorgePapa19 Purposely and ridiculously misleading headline since the official is a Republican!

[Vaadin @vaadin]

5 days until #Devoxx2022 in #Belgium!

Come and meet the #Vaadiners at booth 28. We'll have awesome swag for you to take home and don't forget to join our #giveaway 😉

Register to hear @leifastrand's talk on "Multi-player Enterprise Applications". https://t.co/YyLnyGEmXP

[kimweins @kimweins]

Great to see @SyftProject listed as an SBOM tool in the new @thoughtworks Technology Radar! https://t.co/xqJ8KIhAMb @anchore

[President Biden Archived @POTUS46Archive]

These kinds of mass shootings rarely happen elsewhere in the world.

Why are we willing to live with this carnage? Why do we keep letting this happen? Where in God’s name is our backbone to have the courage to deal with it?

It’s time to turn this pain into action.

[kimweins @kimweins]

We're making it even easier for Docker users to create SBOMs!

[Anchore @anchore]

News from @DockerCon 2022: We joined the @Docker Extension Program! Get all the details here => => => https://t.co/ocKiP3cKDK #container #DockerCon

[Dan Luhring @danluhring]

Really excited to share the collaboration between @Docker and @anchore with you at #DockerCon '22. Join @justincormack and I for a great talk, and bring questions!!! #sbom #containers

Register here if you haven't yet: https://t.co/InpB4c4Usx

[kimweins @kimweins]

@joshbressers How did you decide which instance to join?

[Mark Suster @msuster]

The world has one social media company controlled by a billionaire. Not sure why we need another. Not convinced the first one is going so well for society.

[Syft @SyftProject]

Big news: #SBOM generation just landed in @Docker Desktop — powered by Syft!

$ docker sbom

https://t.co/zrJYDF66Iz

[kimweins @kimweins]

@lorenc_dan @chainguard_dev Have you tried Trinet (PEO)? A couple of early-stage startups I've been at have used it. We have it at Anchore too. You get lots of options and they take care of a lot of the overhead. Not sure on what the cost is for the employer, but maybe a good starting point.

[Grype @GrypeProject]

Should we have a poll to decide whether Grype should support reading SPDX or CycloneDX next?

Just kidding, the new release already supports them both!

You can now run a #vulnerability scan against @SPDXTeam and @CycloneDX_Spec #SBOM documents. 💪

https://t.co/4oc7Z9HrqH

[kimweins @kimweins]

Our second episode of Upstream: The Software Supply Chain Security Podcast just dropped. @joshbressers and I talk with @Oxfraq about why software supply chain security keeps him up at night and what to do about it. https://t.co/HeotGD49LB

[Syft @SyftProject]

Syft can discover Java packages in LOTS of places to find #log4j.

We just added support for diving into more kinds of archives, like .tgz, .tar.xz, .tar.bz, .zip, etc. (the list is long!)

Just use the config option SYFT_PACKAGE_SEARCH_UNINDEXED_ARCHIVES