11:20am • Panel Discussion: OSPOs at Scale: Doing More With Less in 2026 - Ashley Wolf, GitHub; Karolyn Maynard, Comcast; Natali Vlatko, Cisco; Paulette Avolio, Ford; Rashida Toliver, Violane LLC
1:30pm • Strategic Approach To Demonstrating the Value of OSS Efforts - Dawn Foster, Independent
2:25pm • Scaling Your OSPO With Agents and Automation: Lessons From GitHub's Open Source Program - Ashley Wolf, GitHub
3:35pm • Taming MCP Server Sprawl: Securing and Scaling the Model Context Protocol in Production - Jeffrey Borek & Olivia Buzek, IBM
4:30pm • Lazy Rivers and Open Source Security: Learn About the OpenSSF With Angelah and Stacey - Angelah Liu & Stacey Potter, Linux Foundation
5:25pm • From Compliance To Code: The Cyber Resilience Act, SBOMs, DevTeams and YOU! - Marcus Ross, Hamburg Port Authority AöR & Peter Dickten, dcs-fuerth Germany
11:20am • Keynote: The Revolution Hiding in Plain Sight: CI/CD Platform Is About to Change Forever - Dadisi Sanyika, Sol Duara, Inc.
11:50am • Jenkins - Year in Review and Future Roadmap - Mark Waite, Independent
12:15pm • CDF Town Hall - Moderated by Tracy Ragan, DeployHub, Inc.
1:30pm • Lightning Talk: From Embedded Artifacts To Durable Entities: Fixing State in Spinnaker - Ben Powell, Apple
1:45pm • Lightning Talk: Ortelius V12: Post-Deployment Security Defense for DevSecOps - Steve Taylor, DeployHub
2:00pm • Lightning Talk: CDEvents: Ending the "Glue Code" Tax on Engineering Velocity - Mihir Vora & Prem Dhayalan, Capital One
2:15pm • Lightning Talk: CI/CD Cybersecurity Guide - Open Source Tools to Improve DevOps Security - Kate Scarcella, Independent
2:30pm • Keynote: AI in CI/CD Without the Hype: Practical Patterns for Platform Engineers - Jennifer Mulford, Okta
3:35pm • Lightning Talk: When Pipelines Decide: Governing Speed, Trust, and Accountability in AI-Driven CI/CD - Sundeep Bobba, Southwest Airlines & Naga Sujitha Vummaneni, Ripple
4:00pm • Panel Discussion: Protecting the Software Supply Chain with AI - Jennifer Mulford, Okta; Ryo Sugahara, NTT; Mihir Vora, Capital One; Tracy Ragan, DeployHub
4:35pm • The Probabilistic Pipeline: From Green To Safe - Mihir Vora, Capital One
5:00pm • Lightning Talk: Why Don't AI Technologies and CI/CD Pipelines Get Along? - Ryo Sugahara, NTT DATA GROUP Corporation
5:15pm • Lightning Talk: Developer Experience is More Than Just Productivity Metrics - Jeremy Meiss, WWT
5:30pm • Lightning Talk: Simple Yet Scalable MLOps: Bridging the Gap Between Data Science and CI/CD - Sachin Garg, NavankurIT; Sameeksha Garg, Carnegie Mellon University
11:20am • The Exploit of Trust: Securing the Open Source Supply Chain - Kadi McKean, ReversingLabs
1:30pm • One Signature To Rule Them All: Portable Supply Chain Verification With Zarf - Brandt Keller, Defense Unicorns
2:25pm • Lightning Talk: Alcoholless: Lightweight Security Sandbox for Homebrew, AI Agents, Etc. - Akihiro Suda, NTT
2:55pm • Lightning Talk: Artifacts That Explain Themselves: Build Metadata in Practice - Socheat Sou & Prajakta Kashalkar-Joshi, IBM
3:35pm • StageX: Rebuilding Trust Through Multi-Signed, Full-Source Bootstrapped, and Reproducible Builds - Danny Grove, Manifest Cyber & Lance Vick, Distrust
4:30pm • Image Composer Tool: Declarative Multi-Distro Linux Image Builds From Packages - Mats Agerstam & Alpesh Rodage, Intel Corporation
5:25pm • Verified Debian Packaging at Scale - Frederick Lawler, Cloudflare
11:20am • MOT: A Tool To Fight Open-washing in AI - Arnaud Le Hors, IBM
1:30pm • Crawl, Walk, Run With Your MCP Servers - Lin Sun, solo.io
2:25pm • From Image To Itinerary: Multimodal Agentic Travel Planning With MCP, A2A, and BeeAI - Ezequiel Lanza, Intel
3:35pm • Who You Gonna Call? Taming OpenClaw's Rogue AI Agents With OpenTelemetry and Tetragon - Henrik Rexed, Dynatrace
4:30pm • Scaling LLM Inference With Tiered Caching: Extending LMCache With Amazon SageMaker HyperPod - Yihua Cheng, Tensormesh, Inc. & Ziwen Ning
5:25pm • Beyond Vector Search: Building Knowledge Graphs for Autonomous Infrastructure - Torsten Boettjer, Rescile
10:35am • Solutions Showcase
10:35am • Coffee Break
10:45am • Sponsor Activity - AWS: Building Trust in AI Through Open Innovation, Security, and Real-World Solutions
10:45am • Sponsor Activity - Meet Kubernetes Co‑Founder Brendan Burns in an exclusive book signing appearance at Open Source Summit!
11:00am • Sponsor Activity - Meet Kubernetes Co‑Founder Brendan Burns in an exclusive book signing appearance at Open Source Summit!
11:00am • LF Education Learning Lounge: The House Party Problem of Software Supply Chain Security
12:00pm • Lunch (Provided Onsite for All Attendees)
12:30pm • LF Education Learning Lounge: Debunking the Myths of Decentralized Identity
1:00pm • Sponsor Activity - Meet CNCF’s Jonathan Bryce: Exploring the Cloud Native AI Landscape
1:00pm • LF Education Learning Lounge: A Full-Circle, Linux-Inspired Journey
3:05pm • Coffee Break
3:05pm • Ask the Expert Session - Sean Dague, IBM Quantum, on Quantum Computing
3:05pm • Ask the Expert Session - Kate Stewart, The Linux Foundation, on Safety Certification of Open Source
3:05pm • Ask the Expert Session - Kate Scarcella, Independent, on CI/CD security, secure software delivery, AI behavior in real systems, and software supply chain security
3:05pm • Ask the Expert Session - Dirk Hohndel, DH Consulting, on managing maintainer burnout in the age of LLMs
3:15pm • LF Education Learning Lounge: AI May Be the Lead Singer, But You Still Need the Band
11:00am • Panel Discussion: Building an Enterprise Platform for Production-Ready AI Agents - Jothsna Praveena Pendyala, Infosys Ltd; Brett Smith, SAS; Steve Taylor, DeployHub; Sundeep Bobba, Southwest Airlines
11:35am • Lightning Talk: It's Friday! - Alon Nisser, Zencity
11:50am • Platform Engineering: Herding the Electric Sheep - Brett Smith, SAS
12:20pm • Lightning Talk: Where Deployment Authority Lives: A Cloud Native Design Pitfall in GitOps - Kim Schaefer, Game Plan Tech
12:45pm • Bring Your Lunch, We'll Bring Our Notebooks: Securing Software Workflows - Tabatha DiDomenico, G-Research Open Source; Kadi McKean, ReversingLabs; Stacey Potter, OpenSSF & Katherine Druckman, JetBrains
2:10pm • Security Things: How OpenSSF’s Technical Initiatives Keep You Safe From the Upside Down! - Stacey Potter, OpenSSF & Katherine Druckman, JetBrains
2:45pm • Lightning Talk: Offensive and Defensive Strategies for Addressing Open-Source Vulnerabilities - Tracy Ragan, DeployHub, Inc.
3:00pm • GitOps Gone Wild: Hardening Delivery Pipelines for the AI Era - Julien Semaan, Kubex & Corey McGalliard, Akamai
3:25pm • Lightning Talk: Built Clean. Receipts Attached - Adolfo García Veytia, Carabiner Systems & Alex Zenla, Edera
3:35pm • Lightning Talk: Where Does Your Policy Actually Live? - Dadisi Sanyika, Sol Duara, Inc.
4:20pm • eBPF and Open Source Code Ensure the Security of Your Clusters CI/CD Pipeline. - Hudson Coutinho, Linker Bank
4:45pm • Awards and Closing Ceremony - Mark Waite, Independent
9:00am • Keynote: Welcome Back
9:05am • Keynote: Linus Torvalds, Creator of Linux & Git, in Conversation with Dirk Hohndel, Founder, DH Consulting
9:40am • Keynote: How Maintainers Can Build Their Way Through the AI Flood - Madelyn Olson, Valkey Project Maintainer and Principal Engineer, AWS & Jacob Murphy, Valkey Project Maintainer and Software Engineer, Google
9:55am • Keynote: Zephyr: By Developers, For Developers - Kate Stewart, VP Dependable Embedded Systems,The Linux Foundation
10:05am • Keynote: Free to Use, Not Free to Run: Reinventing Package Registries - Robin Bender Ginn, Executive Director, OpenJS Foundation