Software Security & Developer Onboarding: SparkFabrik at DrupalCon Lille 2023
DrupalCon Lille 2023 has ended, concluding with a wealth of enriching learning experiences for attendees. Throughout the event, diverse sessions and workshops provided insights into the latest developments in Drupal and technology—two sessions from SparkFabrik offered valuable knowledge to the Drupal community. On October 18, 2023, SparkFabrik Co-founder and CTO Paolo Mainardi and Drupal Developer Roberto Peruzzo delivered insightful sessions aimed at advancing the knowledge and capabilities of Drupal developers and teams.
Paolo Mainardi's Session: "Unraveling Software Security and the PHP Ecosystem"
Paolo Mainardi took centre stage to explore the essential aspects of software security. His presentation, "Unraveling Software Security and the Current State of the PHP Ecosystem," provided attendees with a comprehensive understanding of these crucial topics. Paolo shared insights into his session with TheDropTimes, offering a glimpse into the content of his presentation and the valuable knowledge he was imparting.
Paolo's session was dedicated to presenting the current state of the software supply chain, including significant recent global events like the SolarWinds breach, log4shell vulnerability, the codecov incident, and the role of Packagist, the PHP package repository in the software ecosystem. Beyond identifying challenges, Paolo offered practical solutions and mitigation strategies. He introduced attendees to essential tools like Sigstore, Syft, and Grype, showing how they simplify digital security. These tools enable digital signatures, facilitate Software Bills of Materials (SBOM) generation, and automate vulnerability scanning.
Paolo shared his experience with TheDropTimes, stating,
"The room was crowded, and the audience was very interested in the different topics I touched. Questions were about root of trust and managing dependencies more securely."
One particularly noteworthy moment in Paolo's session was the public announcement of the "DruBOM - Drupal Bill of Material (SBOM)" module. Although it's still a work in progress, it promises to transform the Drupal community by generating SBOMs from Drupal installations.
Roberto Peruzzo's Session: "Simplifying Developer Onboarding with DrupalPod"
Roberto Peruzzo, a Drupal Developer at SparkFabrik, also had an engaging session on "DrupalPod for shiny happy developers", where he shared insights into simplifying developer onboarding with DrupalPod. It was Roberto's first participation in the Birds of a Feather (BOF) Sessions at DrupalCon.
As Roberto shared with TheDropTimes,
"It was my first Birds of a Feather (BOF) Session at DrupalCon, and I was thrilled to see the audience (developers and some managers) faced the same issues during the project onboarding process that I have. So the discussion was very interesting, and they are curious to know more about GitPod and DrupalPod."
He provided valuable insights into tools that enable a Linux machine in the cloud and a clean development environment mirroring local setups. Additionally, Roberto had the privilege of hosting Ofer Shaal, the creator of DrupalPod, via Google Meet, adding an extra layer of excitement to the session.
As DrupalCon Lille 2023 concludes, it's clear that SparkFabrik's sessions have provided valuable knowledge and practical insights to the community. These sessions highlight the collaborative spirit within the Drupal community and its commitment to enhancing the ecosystem.
Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please let us know in the comments below and we will try to address the issue as best we can.
Related People
Related Organizations
Related Events
DrupalCon Lille 2023
Lille, France
Comments
You may also like
