iiinova — where your digital self keeps evolving

puerco @puerco.mx · 15/09/2026

Oh hai. What are you?

Hairy brown caterpillar I've never seen before

110

Reposted by puerco

Mayor Zohran Kwame Mamdani @mayor.nyc.gov · 14/09/2026

Mexico’s fight for independence is the triumph of a people determined to shape their own future. Today, I was proud to be the first New York City Mayor to march in Sunset Park’s Mexican Independence Day Parade alongside a community that has fostered cultural pride across generations.

Mayor Mamdani waves at the Mexican Independence Day parade.

156129722081

puerco @puerco.mx · 12/09/2026

The sun is out, making it a really nice day. Naturally Kleo decided to come out and say hi to everybody 🤗

060

puerco @puerco.mx · 10/09/2026

I had a lot of fun building some cool, futuristic stuff with Marina to achieve builds with attested hermeticity.

152

Reposted by puerco

Edera @edera.dev · 12/08/2026

SLSA says builds should run isolated. Can you prove yours did? Aug 19, 11am ET: Marina Moore & @puerco.mx show how to verify hermetic builds: cryptographic proof, full SBOM coverage, provenance to the exact VM that ran it. Powered by Cocoon in Edera Protect zones. edera.link/vev-820

edera.link

Built Clean. Receipts Attached.

Security frameworks such as SLSA require software builds to run in isolated environments to guarantee they are “free of unintended external influence”. Except....

091

Reposted by puerco

Mihai Maruseac @mihai.page · 27/08/2026

Excited to see that NYU Tandon is starting a new program to teach students about supply chain security and to help bridge the existing gaps. This is the area where most of the incidents have occured in the past and will in the future. engineering.nyu.edu/news/nyu-tan...

engineering.nyu.edu

NYU Tandon Launches Initiative to Close a Critical Gap in Open Source Security and Train the Students Who Will Fill It | NYU Tandon School of Engineering

031

Reposted by puerco

Protobom @protobom.dev · 26/08/2026

We have just released Protobom v0.6.0 with full support for SPDX 3.0.1 🥳 This release also includes important bug fixes and improvements to the graph API. Protobom is @openssf.org's universal library for SBOM I/O that serves as the format-neutral foundation of many SBOM tools.

github.com

Release v0.6.0 · protobom/protobom

What's New This version adds full support for SPDX 3.0.1 as well as the missing serializers/unserializers for spdx 2.2 and tag value serialization. It also adds some important fixes in the graph A...

111

puerco @puerco.mx · 20/08/2026

Its that time of the year again 😮‍💨 (kidding, much love @golangci-lint.run 💙)

Dozens of repos with open PRs bumping golangci-lint to 1.13

031

Reposted by puerco

Bridget Kromhout @bridgetkromhout.bsky.social · 20/08/2026

Hi, community friends! Did you know the #Kubernetes Steering election is running for the next six weeks? 💻🗳️ If your GitHub handle appears in github.com/kubernetes/c... (or if it should!), please take a look at elections.k8s.io/app/election... and vote to select the newest members of #K8s Steering!

elections.k8s.io

021

puerco @puerco.mx · 11/08/2026

I wasn't expecting to spend my day writing google apps scripts but here we are :/

020

puerco @puerco.mx · 29/07/2026

We have a ton of new cool stuff ready to show in Prague! Join us for @openssf.org community day, the highlight of Open Source Summit 🪿

030

puerco @puerco.mx · 20/07/2026

Bus factor is a pain in the (open source) butt.

020

puerco @puerco.mx · 15/07/2026

And you thought the simulation was already malfunctioning? The matrix is about to implode.

110

Reposted by puerco

Mikael Barbero @mikael.barbero.tech · 07/07/2026

I'm joining Jenn Gile and Paul McCarty on The @opensourcemalware.bsky.social Show to talk about securing Open VSX and the Eclipse Foundation! 🗓️ Thu, July 9, 2:35pm PST LinkedIn event: www.linkedin.com/events/74785... YouTube livestream: youtube.com/live/l3YE9Yi...

youtube.com

The OpenSourceMalware Show - #12

YouTube video by OpenSourceMalware

021

Reposted by puerco

Dare Obasanjo @carnage4life.bsky.social · 23/06/2026

“We’re all trying to find the guy who did this” - ChatGPT

212709547

puerco @puerco.mx · 23/06/2026

oh no, my little coworker here just learned how to sneak in the kitchen to steal the avocados 🥑🐶

Guilty looking dog next to a stolen avocado

030

puerco @puerco.mx · 09/06/2026

This is great to hear !

030

Reposted by puerco

Ian Coldwater 🧊🚫 @lookitup.baby · 30/05/2026

I regularly have people ask me about Mythos these days, so here are my thoughts: Finding bugs is never the hard part. Fixing them is. How’s your organizational alignment? Are your engineers burned out? How is your production resilience? Before you worry about the new shiny, focus on your basics

1936865

puerco @puerco.mx · 14/05/2026

Open Source Summit, here we gooooo 🇲🇽MEX ⮕ 🇺🇸ORD ⮕ 🇺🇸MSP I'm incredibly excited to be back in Minneapolis and getting a couple of days to enjoyb the city, the world owes so much to Minnesotans 👊

060

Reposted by puerco

Stephen Augustus (he/him) @auggie.dev · 07/05/2026

Can't have a conflict of interest if you don't have interests!

1141

puerco @puerco.mx · 28/04/2026

Yaaa🤘🤘🤘🤘

030

puerco @puerco.mx · 29/03/2026

Ok French friends. No. Just don't. Corn tortillas have a purpose. Wheat tortillas have a purpose.

Bag of french tortillas with half wheat and half corn . Yuk

300

Reposted by puerco

James Strong @strongjz.bsky.social · 24/03/2026

Good bye ingress-nginx #KubeCon

0201

Reposted by puerco

natali @natali.rip · 24/03/2026

LONG LIVE INGRESS NGINX 🪦 @strongjz.bsky.social archiving ingress nginx live on the #KubeConEU stage with @youngnick.net and other gateway API maintainers 👑 #KubeCon #CloudNativeCon

36613

Reposted by puerco

James Laverack @jamesl.bsky.social · 22/03/2026

Found @strongjz.bsky.social looking at ingress-nginx. #KubeCon

James looking at a fire, a manic look in his eyes.

3275

Reposted by puerco

Liz Fong-Jones (方禮真) @lizthegrey.com · 16/02/2026

Reminder: if your community does not have an enforced code of conduct, it becomes possible to subvert it to attack or ostracise individuals and spread a whole lot of ugly that marginalised people will run screaming away from.

312515

puerco @puerco.mx · 19/12/2025

Rejekts, let's goooooo 🚀

010

Reposted by puerco

TinyGo @tinygo.org · 15/12/2025

TinyGo 0.40 is out with many improvements to close out the year. Plenty of bugfixes and stability enhancements to make your life better and easier. New updates to the GC that are up to 10% faster! New boards! Go get it right now! github.com/tinygo-org/t... #tinygo #golang

github.com

Release 0.40.0 · tinygo-org/tinygo

Our final release for 2025 includes a number of really excellent improvements to close out the year. We have plenty of bugfixes and stability enhancements to make your life better and easier. For e...

0147

Reposted by puerco

Swift Language @swift.org · 04/12/2025

🎉 10 years of open source Swift! A decade ago today, we opened Swift to the world with a simple blog post: swift.org/blog/welcome What's grown since—thanks to an incredible community of contributors—has been extraordinary. Here's to the next ten years. 🧡

import Foundation

let calendar = Calendar.current

let openSourceDay = calendar.date(from: DateComponents(year: 2015, month: 12, day: 3))!
let anniversary = calendar.date(byAdding: .year, value: 10, to: openSourceDay)!

if calendar.isDateInToday(anniversary) {
print("10 Years of Swift open source! 🎉")
}

18729

Reposted by puerco

Ariadne Conill 🐰 @ariadne.space · 01/12/2025

apk-tools 3.0.0 final is out

051

Reposted by puerco

OpenSSF @openssf.org · 26/11/2025

🌟 New OpenSSF Project Spotlight 💃 In this interview, SLSA Steering Committee member Tom Hennen (Google) breaks down how SLSA is helping organizations strengthen trust across the software supply chain. Watch the full Project Spotlight: 🔗 www.youtube.com/watch?v=gdYl... #OpenSSF #SLSA #OSSSecurity

youtube.com

SLSA: Industry-Driven Guidelines for Software Supply Chain Security | OpenSSF Project Spotlight

YouTube video by OpenSSF

021

puerco @puerco.mx · 22/11/2025

The only thing that beats having some of your best friends at home for dinner is when one of them is a friggin cocktail master. México City SIG Release dinner with @veronicalg.bsky.social and @cpanato.dev .

Kubernetes release managers after dinner. Same as before, but happier.

Delicious pornstar martini made by the one and only Carlos Panato.

4212

puerco @puerco.mx · 15/11/2025

Back from #KubeCon with a replenished heart from seeing so many good friends IRL again. I feel so grateful for all the support from folks around the @carabiner.dev projects. I think our supply chain security ecosystem is about to crack a very important milestone in usability as we advance together!

Welcoming blue sky in Mexico City after returning from KubeCon

0140

puerco @puerco.mx · 13/11/2025

Obligatory yearly notice: This #KubeCon would be so much better if @parisinbmore.bsky.social was here 🥲 #missyou

160

Reposted by puerco

Adrian Mouat @adrianmouat.com · 10/11/2025

@puerco.mx kicking off Open Source SecurityCon by demonstrating how to prevent cats messing with your training data.

181

puerco @puerco.mx · 06/11/2025

Headed to Atlanta with @staceypotter.bsky.social for the most epic keynote ever on Tuesday. You don't want to miss it, it's going to be action-packed 💥 (and yes 🫲🏽🫲🏽🫲🏽)

Luchador and hacker girl driving a car to atlanta. The luchador has three hands, but who cares.

181

puerco @puerco.mx · 05/11/2025

As if there wasn't enough to do already, next week I will present on the role @protobom.dev plays in making SBOMit's verifiable SBOMs consumable. See you there!

060

Reposted by puerco

Seth Larson @sethmlarson.dev · 31/10/2025

⚞NEW⚟ “Trailblazing Python Security” dedicated talk track coming for #PyConUS 🛡️ 🐍🔥 We are looking for sponsors interested in supporting security in the Python ecosystem: pycon.blogspot.com/2025/10/pyco... bsky.app/profile/pyco... #python #opensource #oss #security #supplychain

pycon.blogspot.com

PyCon US 2026 - Call for Proposals Now Open!

We’re so excited to announce that PyCon US 2026 is heading to California for our first year in our sunny new host city of Long Beach, CA ! W...

084

puerco @puerco.mx · 28/10/2025

Wow this is a match made in heaven 🤩

000

puerco @puerco.mx · 23/10/2025

Check out this new example we published in the SLSA blog, it turned out really cool!

110

Reposted by puerco

Carabiner Systems @carabiner.dev · 23/10/2025

We've published a new 🔴🟡🟢 AMPEL case study on the SLSA Blog!

101

puerco @puerco.mx · 19/10/2025

Spotted a dead snake on today's run 🐍

Broken python keychain lying on the ground in Mexico City

030

puerco @puerco.mx · 24/09/2025

I am very proud of this release. Among other improvements, we now support evidence chains in PolicySets. This lets AMPEL synthesize verification subjects from attested data. For example, you can now apply a policy to all the dependencies extracted from an SBOM, the demo below shows how.

172