Welcome to the inaugural GUAC Update, a monthly review of what has happened in the GUAC community and what’s coming up. If you have feedback, please let us know. To include something in next month’s update, leave a comment in the issue.
New contributors
Thanks to the following people for making their first contributions in September (the people listed here may have contributed to other parts of the project previously):
- Anirudh Edpuganti: guac-docs#149
- Ben Cotton: several contributions to GUAC Visualizer
- Parth Patel: several contributions to GUAC Visualizer
Releases
We had several releases for GUAC and GUAC Visualizer in September. Enhancements and bug fixes abound. For GUAC, these releases include network retries for certifiers, improvements to SBOM parsing, and adding the ClearlyDefined certifier to the compose files. The GUAC Visualizer release adds a new information window that includes quick facts on vulnerabilities, SBOMs, and SLSA.
Full details for each release are below:
- GUAC v0.8.3
- GUAC v0.8.4 (blog post)
- GUAC v0.8.5
- GUAC v0.8.6 (blog post)
- GUAC v0.8.7 (blog post)
- GUAC v0.8.8
- GUAC Visualizer v0.4.5 (blog post)
Note: We will not typically publish blog posts in the future for bugfix releases.
Events
Tell your friends: GUAC is participating in Hacktoberfest this year. If you’re looking for other projects to participate in, GUAC can help
In case you missed it, check out the episode of Cloud Native Live where Soham Arora, Parth Patel, and Ben Cotton presented several GUAC use cases beyond security.
And be sure to check out these upcoming events:
- SOSS Fusion in Atlanta, GA on October 22–23, 2024:
- GUAC maintainer Mihai Maruseac will be presenting “End-to-End Secure ML Development”
- GUAC maintainer Jeff Mendoza will be presenting “Scorecard at Scale: Old and New Possibilities for Lifting Security on All Repositories” with Stephen Augustus
- SECTOR in Toronto, ON on October 22–24, 2024:
- GUAC maintainer Parth Patel will present GUAC in the Arsenal
- Cloud Native Rejekts in Salt Lake City, UT on November 11, 2024:
- GUAC maintainer Parth Patel will present “Papers, Please - Scrutinizing AI model creation”
- KubeCon & CloudNativeCon in Salt Lake City, UT on November 12–15, 2024:
- Join several GUAC maintainers and contributors at the Kusari booth (Q37)
Coming up
Be sure to join us in the weekly Maintainer Meetings, monthly Community Meeting, or on Slack and office hours, to participate in the conversation.