Lisa Tagliaferri

This is a great one!

Wow! 😋

YouTube video by Chainguard Check out Chainguard's Dockerfile Converter Course! #docker #chainguard #containers

Announcing our new Dockerfile Converter course! Happy to share what I've been working on this month at @chainguard.dev 🎉

youtube.com/shorts/yjP5Z...

The Psychic Significance of Your Wordle Starting Word B U I L D: You have four hundred and ninety-nine LinkedIn connections, which is tantalizingly close to the coveted “500+” distinction.

CANOE
You capsized on the Allegheny, drenching wet in the bitter dark with the violinist. Did I come to Pennsylvania to die? you asked, incredulous. For you, water is home: the Adriatic, the Navigli, the Hudson. Merrily down the stream, we are such stuff as a dream.
www.newyorker.com/humor/shouts...

#ByteSizedPedagogy It’s important to maintain a balanced teaching diet! This free and open-to-the-public zoom series on digital pedagogy features paired lightning talks introducing teaching topics, interesting approache...

Yesterday's #ByteSizedPedagogy chat with @lisaironcutter.bsky.social and @plach.bsky.social was inspiring and enriching. We're taking a break in July but we'll be back in August with more sessions. Drop me a line or fill out the form to join the list for updates!

forms.gle/uh66msjsaKqu...

One last ICYMI for our #ByteSizedPedagogy tomorrow with @plach.bsky.social and @lisaironcutter.bsky.social. Discussing failure in digital pedagogy tomorrow, June 24th at 1:00 ET. Registration info below. See you then!

Previous announcement was buried in thread so to pull it out here -

Our next #ByteSizedPedagogy session is “On Failure” with
@plach.bsky.social and @lisaironcutter.bsky.social June 24th at 1:00 ET. Registration info below -

cal.lib.virginia.edu/event/14655973

Our next #ByteSizedPedagogy session is “On Failure” with @plach.bsky.social and @lisaironcutter.bsky.social June 24th at 1:00 ET. Registration info below -

cal.lib.virginia.edu/event/14655973

YouTube video by Chainguard Make Migration to Chainguard Containers Easy with Dockerfile Converter

If you ever wanted an easier way to migrate your current Dockerfiles to use @chainguard.dev container images, this is for you!

We just released Dockerfile Converter (dfc), an open source tool created to streamline your migration process. Check out my demo video!

youtu.be/CJea45r3tNU?...

New CFP from JITP on Minimalist Digital Pedagogy. Due June 15th. cuny.manifoldapp.org/read/jitp-ca...

YouTube video by Chainguard Assessing Container Image Security with CHPs

Short intro on using CHPs to assess the security of your container images.
youtu.be/9x2MkE76qj8

You can find the CHPs spec at: github.com/chps-dev/chps
And the scoring tool at: github.com/chps-dev/chp...

Want to see how secure your container images are? Try out the CHPs scorer. Here's a run on an example Python project that's pretty typical of what you find in the wild.

Adrian Mouat discussing CHPs (Container Hardening Profiles) at KubeCon EU 2025

.@adrianmouat.com talking through what could be improved in terms of container security profiles, introducing CHPs, a framework to think through your container security posture

github.com/chps-dev/chps

Evaluating Container Security with Container Hardening Priorities: Some CHPs for Your SLSA Chainguard has announced Container Hardening Priorities (CHPs), a new framework to assess the security of container images. Learn how it works.

Get more details on CHPs here www.chainguard.dev/unchained/ev...

Dustin Kirkland from @chainguard.bsky.social is live on The Kube talking container image security and the CHPs specification. #kubecon

Cloud native university Europe, 1 April 2025 London, England. Yash Pimple, Chainguard. Yash Sharma, DigitalOcean

Yash Sharma of @digitalocean.com and @yashpimple.bsky.social of @chainguard.dev discuss the importance of baking security into your cloud native projects #cloudnativeuniversity #kubecon

Yo dawg, i heard you like kubecon, so you can submit a cfp for kubecon while at kubecon. kubecon.

As #monkigras draws to a close, I did my best to gather all the speakers @monkchips.com invited to speak as a BlueSky List: bsky.app/profile/did:...

Find the folks you want to follow and keep up with!

Continuing w the ongoing unofficial #MonkiGras theme of Eras, @chrisjrn.fyi providing a history of open source. Really appreciate this approach, as it reveals throughlines.

Wrong tag
@geekygirldawn.bsky.social

.@alex.zenla.io reminds us that it’s easy to misattribute hard work to luck, especially for those who are of marginalized backgrounds who often have to work harder than others to get where they are #MonkiGras

Alex Zenla talks about her journey into tech at Monki Gras

The eras tour of @alex.zenla.io and her journey into tech, highlighting how open source is a way for under resourced people to get involved in technology —#MonkiGras

Open source maintainers underpaid, swamped by security, going gray

This is specifically open source maintainers who are working alone!

67% of OSS hobbyist contributors are working solo

The majority of unpaid hobbyists in open source are solo - 67% - according to the 2024 Tidelift Report

@miketheman.com #MonkiFest

Security incidents and CVEs are often found *because* the code is open source

Security in open source is often done in good faith, and with the expectation that solo and hobbyist maintainers will be able to identify and mitigate issues @miketheman.com #MonkiFest

Mike Fiedler on the slippery slope of volunteering

Knowing your *why* is critical - your volunteer work will take as much time as you give it

When contributing to software, putting your “why” in code commits, documentation, etc. to help others understand why something is important and why you are doing given work
@miketheman.com #MonkiFest

Maintainers, contributors, & users devote their most precious resource (time) to open source - it’s important to know a project will have longevity

Some considerations:

* CLAs more likely to result in relicensing vs DCOs
* Neutral foundations
* Governance representing multiple orgs

#MonkiGras

The relicensing of open source projects have been among the rug pulls that have resulted in forks of those projects, explains @emilyfoster.bsky.social

OpenTofu being an example of this collective action, which was created under a neutral foundation #MonkiGras

Dawn Foster discusses power dynamics in open source with a slide on medieval feudalism

How is open source power like medieval feudalism?

Companies with more power can pull the rug out from the rest of us resulting in disruptions

@geekygirldawn.bsky.social talks about how directions can change quickly, from company strategy changes to acquisitions to companies closing

.@taylorbar.net kicked off #MonkiGras with questions about how AI can actually push people towards creativity through overcoming the blank page and giving us more time to dedicate to creativity

Importantly, how does creativity intersect with productivity, and why isn’t creativity studied more?