Showing Up Fully: Meet OpenSSF’s new Community Manager, Stacey Potter
In this special episode of What’s in the SoSS?, we welcome Stacey Potter, the new Community Manager at the Open Source Security Foundation (OpenSSF). Stacey shares her winding journey from managing operations at a vitamin company to becoming a powerful advocate and connector in the open source world. We explore her community-first mindset, her work with CNCF and Platform Engineering Day, and her passion for inclusion and authenticity. Whether you're curious about how to get started in open source or want insight into how community shapes security, this episode is for you.Chapters:00:00 – Welcome + Introduction01:06 – Stacey’s Origin Story in Open Source03:10 – Discovering Community Management at Weaveworks04:02 – Projects and Evolution Across CNCF and Beyond05:44 – Co-Chairing Platform Engineering Day09:06 – Being Openly Queer in Open Source13:10 – What Stacey Hopes to Bring to OpenSSF16:20 – Rapid Fire Round17:36 – Final ThoughtsEpisode links:Stacey Potter’s LinkedIn pageOpenSSF.org/events OpenSSF Community Day JapanOpenSSF Community Day North AmericaOpenSSF Community Day IndiaOpenSSF Community Day North AmericaOpenSSF Community Day EuropeGet involved with the OpenSSFSubscribe to the OpenSSF newsletterFollow the OpenSSF on LinkedIn
--------
21:13
Secure Software Starts with Awareness: Education & Open Source with the Council of Daves
In this episode of What’s in the SOSS, host CRob is joined by the “Council of Daves” - Dr. David Wheeler of the OpenSSF and Dave Russo from Red Hat — for a deep dive into the intersection of secure software development and education. From their open source origin stories to the challenges of educating developers and managers alike, this conversation covers key initiatives like the LFD121 course, upcoming resources on the EU Cyber Resilience Act, and how AI is shifting the landscape.Whether you're a developer, manager, or just open source curious, this is your crash course in why security training matters more than ever.📚 Episode Chapters:Intro & Meet the Council of Daves (0:16)Open Source Origin Stories (1:22)The Role of the Education SIG (4:05)Why Secure Software Education Is Critical (6:30)Inside the LFD121 Secure Development Course (8:01)Training Managers on Secure SDLC Practices (12:24)Why AI Makes Education More Important, Not Less (13:53)What’s Next in Security Education: CRA 101 and More (16:04)Rapid Fire Round: VI vs. EMACS, Tabs or Spaces & Mascots (20:20)Final Thoughts & Call to Action (22:04)Episode links:Dave Russo LinkedInDavid Wheeler LinkedInOpenSSF Free Training:LFD121: Developing Secure SoftwareLFD125: Security for Software Development ManagersLFEL1001: Understanding the EU Cyber Resilience Act (CRA)Get involved with the OpenSSFSubscribe to the OpenSSF NewsletterFollow the OpenSSF on LinkedIn
--------
24:46
Enterprise to Open Source: Steve Fernandez’s Journey to the OpenSSF
In this episode of What’s in the SOSS, we sit down with the OpenSSF’s new General Manager, Steve Fernandez — a seasoned enterprise tech leader whose resumé spans giants like L’Oréal, Coca-Cola, AIG, and Ford. Steve shares his “origin story,” what drew him into the world of open source, and how his decades of experience as a consumer of open source software are shaping his vision for the Foundation.00:21 Welcome & Introductions00:57 Steve’s Tech Journey03:13 Why OpenSSF?05:02 The Role of Security & Strategic Vision08:17 Rapid Fire & Final Thoughts
--------
11:25
JavaScript's Big Footprint: Robin Bender Ginn on Leading OpenJS and Open Source at Scale
Robin Bender Ginn, Executive Director of the OpenJS Foundation, joins us to talk about JavaScript’s massive footprint, the challenges of sustaining critical open source projects, and the importance of security in the web ecosystem. She shares her journey, insights on community-led development, and how OpenJS is building a healthier future for the JavaScript ecosystem.Learn more and register for JSConf North America: https://events.linuxfoundation.org/jsconf-north-america/register/
--------
17:49
Empowering Security: Yesenia Yser on Open Source, AI, and Personal Branding
In this inspiring episode of "What's in the SOSS?", we welcome our new Co-Host, cybersecurity expert and open source advocate Yesenia Yser. Join hosts CRob and Yesenia as they delve into her compelling journey from discovering open source at Red Hat to pioneering AI security at Microsoft. Learn how Yesenia blends her passion for cybersecurity, Brazilian jiu-jitsu, and empowering communities—especially women—to shape her personal brand and advocacy efforts. Don't miss this lively conversation full of actionable insights for anyone interested in cybersecurity, open source communities, and personal growth.Episode Highlights:00:18 – Introduction to Yesenia Yser00:55 – Yesenia's open source origin story03:30 – From cybersecurity professional to jiu-jitsu practitioner05:56 – Building a personal brand in tech and beyond09:04 – Advocating diversity in tech through the BEAR group12:40 – Fun rapid-fire round (VI or Emacs, Coke or Pepsi, favorite open source mascot, spicy vs. mild food, and more)13:52 – Yesenia joins as new co-host of "What's in the SOSS?"15:39 – Advice for breaking into open source and cybersecurityConnect with Yesenia:Yesenia Yser on LinkedInThe Lioness InstinctsGet Involved with the OpenSSF:Subscribe to the OpenSSF newsletterJoin the OpenSSF an upcoming Community DayWatch BEAR Community Office Hours on YouTube
What's in the SOSS? features the sharpest minds in security as they dig into the challenges and opportunities that create a recipe for success in making software more secure. Get a taste of all the ingredients that make up secure open source software (SOSS) and explore the latest trends at the intersection of AI and security, vulnerability management, and threat assessments. Each episode of What's in the SOSS? is packed with valuable insight designed to foster collaboration and promote stronger security practices for the open source software community.About Christopher Robinson (aka CRob), hostCRob is a 43rd level Dungeon Master and a 26th level Securityologist. He is a leader within several Open Source Security Foundation (OpenSSF) efforts and is a frequent speaker on cyber, application, and open source security. He enjoys hats, herding cats, and moonlit walks on the beach.
Sverige