Open Source Summit + Embedded Linux Conference North America 2026: Full Schedule

May 18-20, 2026
Minneapolis, MN
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central DaylightTime (UTC -5). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

11:20am CDT

Building Trust in the AI Era: Agent-to-Agent Communication With DIDs and VCs - Alexander Shcherbakov, DSR Corporation

Monday May 18, 2026 11:20am - 12:00pm CDT

200E (Level Two)

As AI moves from isolated chatbots to autonomous agent ecosystems, the "identity problem" becomes a critical security bottleneck. How does an agent verify the legitimacy of a requestor before executing a sensitive task? Traditional API keys are insufficient for dynamic, decentralized agent interactions.
This session explores a cutting-edge extension to the Linux Foundation A2A protocol that leverages Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs) to establish high-assurance trust and bridges the gap between Decentralized Identity standards and AI, creating a secure backbone for the next generation of agent interoperability.
We will dive into the technical design of integrating OpenID for Verifiable Presentations (OID4VP) into agent communication flows. Attendees will learn how this proposed extension moves beyond static credentials to enable granular, verifiable Authentication (AuthN) and Authorization (AuthZ) for autonomous tasks. Beyond the protocol basics, we will analyze different patterns for VC presentation—comparing interactive vs. automated flows—and evaluate diverse wallet options, ranging from cloud-based agent wallets to secure edge implementations.

Speakers

Alexander Shcherbakov

Head of Decentralized Systems Department, DSR Corporation

Ph.D. in Mathematics. Master of Applied Mathematics and Computer Science.
More than 10 years of experience in Blockchain, DLT, Decentralized Identity and SSI.
Significant contribution to open source. Maintainer and contributor of popular open-source projects.
Extensive experience sp... Read More →

Monday May 18, 2026 11:20am - 12:00pm CDT
200E (Level Two)

Digital Trust

Audience Experience Level Intermediate

1:30pm CDT

Lightning Talk: SSDF Is Not a Checklist: Turning Tasks Into CI/CD Automation - Tracy Ragan, DeployHub, Inc.

Monday May 18, 2026 1:30pm - 1:40pm CDT

200E (Level Two)

In this lightning talk, we’ll introduce the new open-source security tools guide from the Continuous Delivery Foundation and show how it delivers practical, workflow-driven guidance for integrating OpenSSF security tooling into real CI/CD pipelines—helping DevOps and platform engineering teams map pipeline activities directly to the Secure Software Development Framework (SSDF) tasks.

Attendees will learn how the guide helps organizations:
• Understand tooling to meet SSDF standards
• Integrate security without slowing delivery
• Move from tool sprawl to repeatable, secure delivery patterns

This session offers a fast, practical overview of how the CDF community is helping teams turn cybersecurity from an abstract requirement into an executable CI/CD strategy.

Speakers

Tracy Ragan

CEO, DeployHub

Tracy is a recognized expert in software supply chain security and DevSecOps, specializing in managing complex, decoupled architectures. She is the CEO of DeployHub, a scalable post-deployment vulnerability detection platform that empowers software to 'self-heal' by automatically... Read More →

Monday May 18, 2026 1:30pm - 1:40pm CDT
200E (Level Two)

Digital Trust

Audience Experience Level Beginner

1:45pm CDT

OpenSSH + FIDO Workshop - Dennis Hills & Alan Alvarez, Yubico

Monday May 18, 2026 1:45pm - 3:05pm CDT

200E (Level Two)

OpenSSH has built-in support for FIDO security keys since version 8.2 (released in 2020). This means you can protect your SSH private keys using security keys, similar to how this can be done with OpenPGP smart cards and cryptographic tokens that support PKCS#11.

Although such devices all allow you to protect your private keys using cryptographic hardware, the benefits on using FIDO include:

- FIDO is easier to use, especially for beginners
- security keys can be used on the web as well to store passkeys
- no need for vendor-specific software (like PKCS#11 modules)
- security keys are inexpensive
- FIDO features device attestation, which lets you cryptographically prove you are using a specific security key make and model.

In this talk, we will give a short introduction to FIDO security keys, and provide several demos of the use of security keys with OpenSSH, such as signing arbitrary data, authenticating to remote systems, and using key attestation.

The talk consists of a number of demos that participants can follow along on their system. Participants can bring their own security key (any vendor will do). If they do not own a security key one will be provided to them.

Speakers

Dennis Hills

Sr. Solutions Architect, Yubico

Dennis Hills is a Sr. Solutions Architect for Yubico and a University of Washington graduate in Computing Software & Systems.

He has two decades of web service experience ranging from client support and networking to software open source development across various platforms and la... Read More →

Alan Alvarez

Developer Advocate, Yubico

Alan Alvarez is a Developer Advocate at Yubico, specializing in WebAuthn, passkeys, and phishing-resistant authentication. Previously, he worked as a software engineer across multiple industries, building and maintaining cloud-based services and DevOps workflows. Alan’s work sits... Read More →

Monday May 18, 2026 1:45pm - 3:05pm CDT
200E (Level Two)

Digital Trust

Audience Experience Level Beginner

3:35pm CDT

Bots Are Your Best Maintainers: Scaling Governance With Automated Security Tools - Chandra Inguva & Manoj Kumar, Microsoft

Monday May 18, 2026 3:35pm - 4:15pm CDT

200E (Level Two)

Open source projects are under-resourced, yet responsible for maintaining large, security-critical dependency ecosystems. Maintainers are overwhelmed by manual reviews, vulnerability alerts, and patch backlogs—and falling behind is inevitable.
This talk shows how automated security bots can take over the bulk of governance work. Using tools like Dependabot, Renovate, and automated security scanners, projects can automatically detect vulnerabilities, open and validate pull requests, enforce policies, and reduce human effort without sacrificing trust or quality.
We’ll walk through a practical bot stack that allows open source projects to scale from a small maintainer group to dozens of contributors, while cutting patch timelines from weeks to days. Attendees will learn which tools to deploy, how to configure them safely, and how to rely on automation for repetitive security work—so humans can focus on decisions that actually require judgment.

Speakers

Chandra Inguva

Product Manager, Microsoft

Chandra Inguva is a product manager at Microsoft

Manoj Kumar

Sr. Security Product Manager, Microsoft

Manoj Kumar is a Cybersecurity Leader at Microsoft with 20+ years of experience. A pioneer in AI/ML security, he helped build the Responsible AI Standard for LLMs and led AETHER’s group creating CodeQL rules for AI risk detection. Manoj architected Azure ML for air-gapped government... Read More →

Monday May 18, 2026 3:35pm - 4:15pm CDT
200E (Level Two)

Digital Trust

Audience Experience Level Beginner

4:30pm CDT

The Architecture of Accountability: Transparency in Software - Hayden Blauzvern, Google

Monday May 18, 2026 4:30pm - 5:10pm CDT

200E (Level Two)

In the context of secure systems, "transparency" is often a loaded term. We will propose a precise definition: the guarantee of discoverability and auditability. Transparency is the difference between a system that merely claims to be secure and a system that provides proof of its security claims.

This session offers a high-level primer on the principles of cryptographic transparency. We will discuss how to design transparent applications and explore the tooling available to create tamper-evident systems. We will examine how this pattern has already been used, from Certificate Transparency providing auditability for web PKI, Binary Transparency securing software delivery, and Key Transparency hardening messaging applications. We will demonstrate how transparency can be applied for emerging frontiers as well, such as AI model provenance and news authenticity.

Finally, we will discuss the ongoing specifications work to standardize transparency primitives and highlight opportunities to participate. Attendees will leave with a clear mental model for transparency by design, ready to build systems where accountability is a default feature, not an afterthought.

Speakers

Hayden Blauzvern

Technical Lead Manager, Google

Hayden Blauzvern is a technical lead manager on Google’s Open Source Security Team, focused on making open-source software more secure through code signing and applied transparency. Hayden is a maintainer and the community chair on the Sigstore project.

Monday May 18, 2026 4:30pm - 5:10pm CDT
200E (Level Two)

Digital Trust

Audience Experience Level Any

5:25pm CDT

Panel Discussion: Securing the AI Supply Chain: Critical Infrastructure for Model Integrity and Trust - Christopher Robinson, OpenSSF; Jay White, Microsoft; Mihai Maruseac, OpenAI; Marcela Melara, Intel

Monday May 18, 2026 5:25pm - 6:05pm CDT

200E (Level Two)

As AI systems become deeply embedded in critical infrastructure and enterprise operations, ensuring the security, integrity, and provenance of machine learning models has become a fundamental challenge for the open source ecosystem.

This session will provide an overview of the OpenSSF AI/ML Security Working Group's focus on practical solutions that bring software supply chain security best practices to AI.

1. End-to-End Model Provenance: Detect unintended changes and ensure verifiable audit trails throughout the entire model lifecycle.

2. Model Signing: Provide verifiable claims about model integrity by establishing cryptographic signing patterns.

3. GPU-Based Model Integrity: Address the scalability of authenticating very large ML models by leveraging GPU acceleration in a vendor-agnostic API.

4. Frameworks for Securing AI Agent Communications: A comprehensive security framework to secure AI agent-tool orchestration against emerging threats.

5. Cyber Reasoning System (CRS): AI-for-Security systems to identify and submit patches for software vulnerabilities.

Panelists:
Marcela Melara, Intel
Mihai Maruseac, OpenAI
Jay White, Microsoft

Moderator:
Christopher Robinson, OpenSSF

Speakers

Christopher "CRob" Robinson

Chief Architect - OpenSSF, OpenSSF

Christopher Robinson (aka CRob) is the Chief Security Architect for the Open Source Security Foundation. With over 25 years of Enterprise-class engineering, architectural, operational and leadership experience, CRob has worked at several Fortune 500 companies with experience in the... Read More →

Jay White

Security Principal Program Manager, Microsoft Corporation

Jay has 20+ years of IT/information security experience dedicated to cyber risk, security, privacy, and compliance. He provides a combined tactical and strategic balance towards the implementation of security and compliance requirements that aligns to an organization’s broader business... Read More →

Mihai Maruseac

Member of Technical Staff, OpenAI

Building AGI with Privacy and Security as Member of Technical Staff at OpenAI.

Previously was a member of the Google Open Source Security Team (GOSST), working on Supply Chain Security for ML (released model-signing). Co-lead on a Secure AI Framework (SAIF) workstream from Google on AI supply chain. Chairing OpenSSF AI/ML working group and involved in CoSAI’s... Read More →

Marcela Melara

Research Scientist, Intel Corporation

Marcela Melara is a research scientist at Intel making distributed and cloud systems more trustworthy. Her current work focuses on developing solutions for high-integrity software and AI supply chains. She leads a number of internal, academic and open-source projects on supply chain... Read More →

Monday May 18, 2026 5:25pm - 6:05pm CDT
200E (Level Two)

Digital Trust

Audience Experience Level Intermediate

11:00am CDT

Driving Kubernetes’ Global Adoption and Contributions With Documentation - Rey Lejano, Red Hat

Tuesday May 19, 2026 11:00am - 11:40am CDT

200E (Level Two)

Kubernetes documentation is facing a veering wind in users. Since the start of 2026, there have been twice as many global users as there were in 2025. With 15 localizations of the Kubernetes docs and 11.59 million active users in 2025, and 3 yearly releases, maintaining Kubernetes documentation and growing contributors can be daunting. This session explores how the Kubernetes project developed a community, processes, and practices to grow contributors and aid worldwide adoption.

Speakers

Rey Lejano

Solutions Architect, CNCF Ambassador, Red Hat

Rey Lejano is a Solutions Architect at Red Hat and is the co-chair of Kubernetes SIG Docs. He contributes to Kubernetes SIG Security, Release, & Contributor Experience. He is a member of seven Kubernetes Release Teams including serving as the 1.23 Release Lead and 1.25 Emeritus Adviser... Read More →

Tuesday May 19, 2026 11:00am - 11:40am CDT
200E (Level Two)

OSS Enabling & Management, Technical Documentation

Audience Experience Level Beginner

11:55am CDT

How Apache Superset Reinvented (and Re-engineered) Its World of Documentation - Evan Rusackas, Preset, Inc

Tuesday May 19, 2026 11:55am - 12:35pm CDT

200E (Level Two)

Learn how Apache Superset, the top open-source project in Business Intelligence, re-tooled their entire world of user/admin/developer documentation.

Our new Extensions architecture gave us the chance to re-imagine how we WANT our docs to work. This isn't AI-generated docs... it's using AI to re-engineer how our docs build themselves.

Learn how we managed to:
• Federate scattered readmes/wikis/etc. under one roof
• Independently version areas for different release cycles and intents
• Automate screenshots and content to "keep up" with the codebase
• Bring API docs, React Story book, and more into a centralized interactive portal
• Leverage AI to maintain docs... for people AND for humans
• Syndicate content from third party sources to be the end-all-be-all of Superset documentation
• Adding AI tools (for free!) to provide chat-based support AND learn where our docs are falling short from the result
• Use the codebase itself to build and maintain long-tail aspects of the docs

We've learned a lot of hard lessons over the years, and we're happy to share the process, ideas, and tools we've used to take things to the next level.

Speakers

Evan Rusackas

Head of Community, Preset, Inc

Evan is a community lead and software engineer with Preset, Inc. and works closely with the Apache Superset community. Evan's interests lie in UI design, data visualization, and frontend engineering. He spends the bulk of his time growing and engaging with the Superset community... Read More →

Tuesday May 19, 2026 11:55am - 12:35pm CDT
200E (Level Two)

OSS Enabling & Management, Technical Documentation

Audience Experience Level Intermediate

2:10pm CDT

Architecting for Onboarding: Building a "Docs-as-Code" Pipeline for Open Source Sustainability - Sai Sravan Cherukuri, Independent Contributor

Tuesday May 19, 2026 2:10pm - 2:50pm CDT

200E (Level Two)

In open source, a project's survival depends on its contributor funnel. If developers can't build, test, or grasp your project in the first ten minutes, they'll leave. Documentation is the primary interface for that experience, but is often the most neglected part of the repository.
This session goes past the basic README to show how maintainers can set up a clear Documentation Development Life Cycle. We will explore the 'Docs-as-Code' idea, treating documentation like code by keeping it in Git, peer-reviewing it, and checking it with CI/CD pipelines.
Key takeaways include:
The Pipeline: Setting up automated linters (Vale, Markdownlint) to enforce style and technical accuracy.
The Process: Make sure every new feature includes updated documentation to prevent it from becoming outdated.
The Community: Learn ways to help non-coders contribute, and manage docs with people all over the world.
Join this session to learn actionable steps you can implement right away to make your open-source project more welcoming, robust, and future-proof. Start applying these strategies today and transform your documentation process.

Speakers

Sai Sravan Cherukuri

Open-Source Enthusiast and DevSecOps Architect, Independent Contributor

Engineering for Accessibility: The Human Element of Infrastructure
Sai Sravan is an architect of systems and a champion for the people who build them. As a dedicated open-source advocate, Sai bridges the gap between high-level technical development and community accessibility, ope... Read More →

Tuesday May 19, 2026 2:10pm - 2:50pm CDT
200E (Level Two)

OSS Enabling & Management, Technical Documentation

Audience Experience Level Intermediate

3:05pm CDT

Tiny Repos, Big Impact: Level Up Through Open-Source Teaching - Katie Kodes, Independent

Tuesday May 19, 2026 3:05pm - 3:45pm CDT

200E (Level Two)

When you approach your public code repositories with teaching as the primary goal -- designing them specifically to help others learn -- you transform simple code sharing or tech blogging into open-source teaching.

Discover how documenting your technical learning journey through small, focused open-source projects can accelerate your learning, establish your expertise, and create value for both the open-source community and enterprise development teams.

Examples of my adventures in open-source teaching include:

* A 32-line working web application, and its 41-line fork that, in 9 lines, adds automated unit tests.
* A fully-CI/CD-tested OpenTofu module in less than 100 lines of code.

In this session, you'll learn practical strategies for right-sizing demo repos, choosing the right platforms for sharing, and capturing the unique value of your "beginner's mind" to help others learn.

Speakers

Katie Kodes

DevOps Architect

Katie is a DevOps architect who brings clarity to complex technical challenges across the entire stack. With experience ranging from infrastructure to front-end development, she helps teams build reliable, observable systems that deliver real business value. A passionate educator... Read More →

Tuesday May 19, 2026 3:05pm - 3:45pm CDT
200E (Level Two)

OSS Enabling & Management, Technical Documentation

Audience Experience Level Any

4:20pm CDT

BOF: Funding Open Source Sustainably - Georg Link, CHAOSS & Terence McCutcheon, Intersect MBO

Tuesday May 19, 2026 4:20pm - 5:00pm CDT

200E (Level Two)

This birds of a feather (BOF) session is for two audiences to get together. OSS funders & members of OSS projects who are seeking funding. The goal of the BOF is to share experiences from both perspectives. To be clear, this is not a match-making session or a funding giveaway, but an exchange of experiences. The BOF facilitators will seed the discussion with insights from interviews of both audiences, also our personal experiences from implementing the funding programs of the “Paid Open Source Model” (POSM).

We’ll discuss the changing landscape of open source funding. Long-time funding programs, like the Mozilla Open Source Support (MOSS) awards closed doors. However, new funding programs are designed to align with open source values are offering new opportunities, whether it is funding from blockchain treasuries like POSM or government programs like the German Sovereign Tech Fund.

The outcome of the BOF is two fold. One, maintainers and OSS project members who are seeking funding, can better understand how to access funding. Two, OSS funders can hear directly from projects to better understand what process improvements could help with funding more effectively and efficiently.

Speakers

Georg Link

Open Source Strategist, CHAOSS

Georg’s mission is to make open source more professional by using community metrics and analytics. Georg cofounded the CHAOSS Project to advance analytics and metrics for open source project health. Georg is an active contributor to several projects and has often presents on open... Read More →

Terence McCutcheon

Open Source Program Manager, Intersect MBO

Tex is an up and coming Open Source Program Manager leading various efforts such as community-maintainer pilots, a Developer Advocate program, and increased transparency across multiple channels with a large Community. He excels at finding unconventional solutions to common problems... Read More →

Tuesday May 19, 2026 4:20pm - 5:00pm CDT
200E (Level Two)

OSS Enabling & Management, Project Leadership

Audience Experience Level Any