Open Source Summit North America 2025: Full Schedule

June 23 - 25, 2025
Denver, Colorado
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Mountain Daylight Time (UTC/GMT -6). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

arrow_back View All Dates

11:00am MDT

Unleashing the Power of Mutation Testing: Supercharging Software Quality and Resilience - Emma Taylor, SciTec

Tuesday June 24, 2025 11:00am - 11:20am MDT

Bluebird Ballroom 3B

Mutation testing is a powerful technique used to assess the effectiveness of software tests by introducing small, deliberate changes (mutations) to the codebase. These mutations simulate common coding errors, offering a robust way to evaluate how well existing test suites can detect potential faults. This talk will explore the principles behind mutation testing, its applications in real-world development cycles, and its potential to uncover gaps in test coverage that traditional testing methods may miss. Attendees will learn about the core concepts, tools, and strategies for integrating mutation testing into CI/CD workflow, as well as the challenges and best practices for maximizing its benefits. Whether you’re looking to improve the robustness of your tests or dive deeper into software quality assurance, this session will provide valuable insights into how mutation testing can take your software’s reliability to the next level.

Speakers

Emma Taylor

Software Engineer, SciTec

Emma Taylor is a Full-Stack Developer with a BS in Computer Science and Electrical Engineering, specializing in scalable, high-performance systems. Skilled in Java, C/C++, Docker, and microservices, she uses mutation testing to enhance code quality and identify test coverage gaps... Read More →

Mutation Testing pdf

Tuesday June 24, 2025 11:00am - 11:20am MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Beginner
Session Slides Yes

11:20am MDT

A Secure Tekton Task by Using Confidential Containers - Tatsushi Inagaki, IBM

Tuesday June 24, 2025 11:20am - 11:40am MDT

Bluebird Ballroom 3B

Software supply chain attack is an emerging threat for today’s enterprises. An attacker first gets an internal network access of the target enterprise, typically by using social engineering. Next the attacker gets administrator access to a software supply chain of the enterprise. Finally the attacker injects a backdoor into a built artifact and steals confidential information or digital assets from the enterprise, or even worse from customers.

A critical attack surface here is the administrator of the software supply chain. Confidential Containers is an open source project to protect containers from administrators by using trusted execution environments (TEEs). It protects a Kubernetes pod from a cluster administrator by running the pod inside of a TEE and validating the pod by remote attestation.

This talk presents a use case of Confidential Containers to protect a Tekton task. You will understand how Confidential Containers protects a task and artifacts even when the cluster administrator is compromised.

Speakers

Tatsushi Inagaki

Staff Research Scientist, IBM

Tatsushi is working on research to enhance the security of IBM Z. He contributed to various open source projects. He is recently contributing to Confidential Containers, which is a sandbox project of Cloud Native Computing Foundation.

A Secure Tekton Task by Using Confidential Containers pdf

Tuesday June 24, 2025 11:20am - 11:40am MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Advanced
Session Slides Yes

11:55am MDT

Who Are You Building For: Pipelines Have a Purpose - Andrew McNamara & Julen Landa Alustiza, Red Hat

Tuesday June 24, 2025 11:55am - 12:15pm MDT

Bluebird Ballroom 3B

Software is built for a purpose. The same property applies to build platforms!

We will show you how we are leveraging Tekton and Tekton Chains at Red Hat to create a build platform that meets developers where they are at. Developers start with the pipeline defined in their git repository – free for them to modify and update on their terms, with Tekton tasks ready to scan artifacts for vulnerabilities and Renovate pre-configured to help keep dependencies up to date.

This platform helps make sure that the artifacts are going somewhere. Using the detailed SLSA Provenance generated by Tekton Chains, the build platform enables policy driven development. Developers can see in their PRs whether they are on track to meet the target’s requirements – whether it is pushing to a development or production environment. Gone are the days saying “I didn’t know I had to do that!”

We won’t send the artifacts just anywhere, however, as we can tailor policies to ensure that you are meeting all of the requirements. The platform can inspect the provenance to ensure that artifacts are built using trusted steps and all required checks are good for takeoff!

Speakers

Andrew McNamara

Senior Principal Software Engineer, Red Hat

Andrew McNamara is passionate about usable CI/CD, security, and DevSecOps, drawing from his experience of building and shipping containerized software at IBM and Red Hat. As a SLSA maintainer, Andrew is helping people identify how to approach and understand supply chain security... Read More →

Julen Alustiza

Ansible Product Delivery Engineering Architect, Red Hat

I am an Open Source enthusiast currently working for Red Hat as Ansible Delivery Pipelines techincal lead.

pipelines have a purpose oss na pdf

Tuesday June 24, 2025 11:55am - 12:15pm MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Beginner
Session Slides Yes

12:15pm MDT

Standardizing CI/CD Observability: Insights From the OpenTelemetry CI/CD SIG - Dotan Horovits, AWS

Tuesday June 24, 2025 12:15pm - 12:35pm MDT

Bluebird Ballroom 3B

We all know that observability is a must-have for operating systems in production. But we often neglect our own backyard - our software release process. As a result, we also lack standardization, and each CI/CD tool invent its own way of reporting about pipeline runs, which causes fragmentation, lock-in and difficulty to leverage existing observability tools.

We've been talking about the need for a common "language" for reporting and observing CI/CD pipelines for years, and finally, we see the first "words" of this language entering the "dictionary" of observability - the OpenTelemetry open specification and semantic conventions. On this talk the OTel CI/CD SIG leads will share the need, and the work of the SIG.

Join us to learn about this new SIG, its role, the milestones achieved and roadmap ahead. The talk will also discuss the alignment with adjacent open source communities such as the CDF's Jenkins and CDEvents and the Eiffel community.

Speakers

Dotan Horovits

Senior Developer Advocate, AWS OpenSearch

Cloud Native Computing Foundation (CNCF), Developer Advocate, DevOps Specialist, Open Source Evangelist)

Tuesday June 24, 2025 12:15pm - 12:35pm MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Advanced

12:35pm MDT

Cybersecurity with CDF & OpenSSF Focus Group

Tuesday June 24, 2025 12:35pm - 2:10pm MDT

Bluebird Ballroom 3B

Join the CDF for a lunch focus group on CI/CD Cybersecurity. Our goal is to investigate the persistent gap between available security tooling and its adoption in modern CI/CD pipelines and to discuss new approaches to addressing vulnerabilities across the DevOps pipeline. We will discuss barriers to compliance with the Secure Software Development Framework and explore new methods for minimizing security risks. Topics will include open source software debloating, utilizing AI to remediate package dependencies, leveraging evidence stores for tracking vulnerability exposure, and the evolution of DevOps into a broader platform engineering discipline to secure the supply chain.

Speakers

Tracy Ragan

CEO, DeployHub, Inc.

Tracy is a recognized expert in software supply chain security and DevSecOps, specializing in managing complex, decoupled architectures. She is the CEO of DeployHub, a scalable continuous vulnerability management platform that empowers software to 'self-heal' by automatically applying... Read More →

CI CD Focus Group (1) pptx

Tuesday June 24, 2025 12:35pm - 2:10pm MDT
Bluebird Ballroom 3B

cdCon

Session Slides Yes

2:10pm MDT

Your Deployments Are Lying. AI Knows - Seema Saharan, Autodesk & Aditya Soni, Forrester Research

Tuesday June 24, 2025 2:10pm - 2:30pm MDT

Bluebird Ballroom 3B

Is your CI/CD pipeline giving you a green light when, in reality, something's lurking in the shadows? Traditional monitoring tools often miss the subtle failures that could silently impact your users. While your pipeline may say all systems go, AI sees the truth behind the curtain.
In this talk, we’ll unveil how AI can catch those hidden deployment issues that your traditional monitoring tools overlook, providing real-time, actionable insights into your Kubernetes environments.

Here’s what we’ll cover:
1. Identify deployment issues missed by traditional monitoring tools with insights from AI
2. Leverage AI to analyze logs, metrics, and traces for early problem detection.
3. Watch how AI automatically correlates data to resolve issues in real time.
By the end of this talk, you’ll gain the knowledge to integrate AI-powered observability into your CI/CD pipelines, enabling you to catch hidden problems early and deploy with confidence.

Speakers

Seema Saharan

Site Reliability Engineer, CNCF Ambassador, Autodesk

Meet Seema, the tech whiz at Autodesk. She's not just about fixing things – she loves sharing what she knows! Whether speaking at cool events like GitLab Commit, and GitHub Universe or breaking down tech on her YouTube channel, Seema makes the complicated stuff easy and fun. Join... Read More →

Aditya Soni

CNCF Ambassador, SRE, Forrester

Aditya Soni is a DevOps/SRE tech professional He worked with Product and Service based companies including Red Hat, Searce, and is currently positioned at Forrester Research as a DevOps Engineer II. He holds AWS, GCP, Azure, RedHat, and Kubernetes Certifications.He is a CNCF Ambassador... Read More →

Tuesday June 24, 2025 2:10pm - 2:30pm MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Any

2:30pm MDT

Telemetry Showdown: Fluent Bit vs. OpenTelemetry Collector - A Comprehensive Benchmark Analysis - Henrik Rexed, Dynatrace

Tuesday June 24, 2025 2:30pm - 2:50pm MDT

Bluebird Ballroom 3B

In a push to standardize observability practices, the cloud-native community has embraced OpenTelemetry, offering a unified framework for metrics, logs, and traces. Prior to this, log processing relied on agents like fluent, evolving into fluentbit. With fluentbit's recent expansion to support additional signals and the OpenTelemetry Collector's emergence, a pertinent question arises: Which is the superior choice for performance?

This session delves into:
- Unveiling the distinctions between Fluent Bit and the OpenTelemetry Collector.
- Sharing the findings derived from a series of benchmark tests.
- Providing valuable insights to empower the community in selecting the most fitting agent for their cloud-native environments.

Speakers

Henrik Rexed

Cloud native advocate, Dynatrace

Henrik is a Cloud Native Advocate at Dynatrace and a CNCF Ambassador. Prior to Dynatrace, Henrik has worked more than 15 years, as Performance Engineer. Henrik Rexed Is Also one of the Organizer of the conferences named WOPR, KCD Austria and the owner of the Youtube Channel IsitO... Read More →

LIGHT Fluent Bit Vs. OpenTelemetry Collector a Comprehensive Benchmark Analysis pdf

Tuesday June 24, 2025 2:30pm - 2:50pm MDT
Bluebird Ballroom 3B

cdCon

Session Slides Yes

3:05pm MDT

Transforming Software Development and Engineering Velocity at EBay With AI/ML in CI/CD - Aravind Kannan, eBay

Tuesday June 24, 2025 3:05pm - 3:25pm MDT

Bluebird Ballroom 3B

In today's digital landscape, rapid and reliable software delivery is crucial. Join us to explore how eBay has integrated AI and ML into its Continuous Integration and Continuous Deployment (CI/CD) processes, revolutionizing software development at scale.

We will share insights from eBay's "Engineering Velocity" initiative, detailing how our AI and ML powered CI/CD platform helped our engineers in achieving a 23% increase in software releases and a 10% reduction in production bugs.

This session will cover:

* The strategic implementation of AI and ML in CI/CD to enhance efficiency and quality.
* Real-world examples of how AI-driven insights and automation have streamlined our software development, review, testing, debugging and delivery process.
* Key challenges and lessons learned in integrating AI and ML technologies into the CI/CD platform.
* Future trends and opportunities in AI and ML for CI/CD.

Whether you're an engineering leader, developer, or DevOps practitioner, gain insights and strategies to leverage AI and ML for faster, more reliable software delivery.

Speakers

Aravind Kannan

Director, Software Engineering, eBay Inc.

Aravind Kannan leads eBay's transformative Engineering Velocity initiative, responsible for driving improvements in software development and delivery platforms and processes across the organization. He is committed to empowering engineers to deliver value to customers faster, easier... Read More →

eBay AI:ML in CI:CD pdf

Tuesday June 24, 2025 3:05pm - 3:25pm MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Any
Session Slides Yes

3:25pm MDT

Lightning Talk: One Year In: The State of the DataOps Initiative - Lisa Cao, Datastrato

Tuesday June 24, 2025 3:25pm - 3:35pm MDT

Bluebird Ballroom 3B

One year ago, we launched The DataOps Initiative as a forum and gathering place for experts across DevOps, Data Engineering, and Machine Learning fields to bring clarity and structure to how data moves through modern delivery pipelines. Since then, we’ve defined foundational principles, shipped technical blog posts, hosted community meetings, and kicked off work on a vendor-neutral DataOps landscape.

This lightning talk will cover what we’ve built so far—early architecture patterns, team topologies, learning materials in development, and workshop formats aimed at bridging CI/CD and data platforms.

Speakers

Lisa Cao

Data Engineer, Product Manager, Datastrato

Lisa is a former data analyst, now data engineer and software engineer interested in observability, validation, and reliability in data systems. Her background consists of a variety of start-ups, nonprofits, consulting firms, GovTech, and biotechnology. She is a Google Women TechMakers... Read More →

Tuesday June 24, 2025 3:25pm - 3:35pm MDT
Bluebird Ballroom 3B

cdCon

3:35pm MDT

Lightning Talk: Shift Left With AI: Smarter Code Reviews for DevOps Acceleration - Vaibhav Tupe, Equinix & Shrinath Thube, IBM

Tuesday June 24, 2025 3:35pm - 3:45pm MDT

Bluebird Ballroom 3B

In the fast-paced world of CI/CD, traditional code reviews can become a bottleneck, slowing down development and introducing risks due to human errors or inconsistencies. What if you could have an AI-powered assistant that reviews your code in real-time, providing actionable insights, detecting security vulnerabilities, and ensuring compliance—all while integrating seamlessly into your DevOps pipeline?

This session explores how Generative AI is transforming code reviews in CI/CD environments. We will dive into how AI-driven assistants can enhance developer productivity, improve code quality, and automate security and compliance checks.

We will cover:
The challenges of traditional code reviews in modern CI/CD workflows
How Generative AI enhances automated code reviews for speed and accuracy
Real-world use cases and best practices for integrating AI-powered code review assistants into your pipelines
The impact of AI on security, compliance, and developer experience
By the end of this session, you’ll understand how to leverage AI to make your CI/CD pipelines smarter, faster, and more secure—reducing friction in your development lifecycle while ensuring high-quality code.

Speakers

Shrinath Thube

Software Developer, IBM, USA

IEEE Senior Member | Software Developer, IBM | Technology Advisory Board MemberShrinath Thube is a Software Developer at IBM with extensive experience in security, cloud, microservices, observability. An IEEE Senior Member, he is part of the IEEE CISOSE 2025 Organizing Committee... Read More →

Vaibhav Tupe

Tech Lead, Equinix

Vaibhav Tupe is a distinguished Technology Advisory Board Member and Engineering Leader specializing in cybersecurity, cloud, and AI-ready data center infrastructure. With over 13 years of experience, he currently serves as a Technology Leader at Equinix USA, where he drives high-performance... Read More →

Vaibhav Tupe Shift left with ai pdf

Tuesday June 24, 2025 3:35pm - 3:45pm MDT
Bluebird Ballroom 3B

cdCon

Audience Experience Level Beginner
Session Slides Yes

4:20pm MDT

Practitioners' Panel - Bob Walker, Octopus Deploy; Brett Smith, SAS; Kate Scarcella, Cybersecurity Architect; Ben Powell, Apple, Melissa McKay, DevSecOps & MLOps Author/Speaker

Tuesday June 24, 2025 4:20pm - 5:00pm MDT

Bluebird Ballroom 3B

Continuous Integration and Continuous Delivery cover a wide range of environments, technologies, and tools. Join us for a panel discussion with experienced CI/CD practitioners. You’ll hear their stories, learn from their experiences, and gain new insights into software delivery.

Speakers

Melissa McKay

DevSecOps & MLOps Author/Speaker

Melissa is passionate about Java, DevSecOps, CI/CD, and MLOps. She has served on the TSC of the Open Platform for Enterprise AI (OPEA) and the CNCF Governing Board, and regularly shares her knowledge with the community as a developer, speaker, and author. She has been recognized as... Read More →

Bob Walker

Field CTO, Octopus Deploy

Bob Walker is a Field CTO Octopus Deploy. Bob started as a developer in the early days of .NET when web forms were the hottest new thing, and manual deployments were the norm. After one too many five-hour 2 AM Saturday deployments, he searched for any automation to stop that pain... Read More →

Brett Smith

Distinguished Software Developer, SAS Institute, Inc.

Software Architect/Engineer/Developer with 25+ years of experience. Specialties: Event Driven Automation, Continuous Integration/Delivery/Testing/Deployment, Supply Chain Security Expertise: Linux, packaging, and tool design. Currently Engineering and Securing the Supply Chain... Read More →

Ben Powell

Software Engineer, Apple

Ben is a software engineer at Apple for the Spinnaker team with previous experience at AWS for the AWS SDK and ECS team. He has contributed to various different tools, services, and proposals through the years, governs the Cloud SIG for Spinnaker, and is an active participant for... Read More →

Kate Scarcella

Cybersecurity Architect

Kate Scarcella is a seasoned cybersecurity leader with over two decades of experience driving innovation and building cyber resilience. At IBM, she served on the Security Board of Advisors, where she guided Fortune 50 enterprises on strengthening their cybersecurity postures.Kate... Read More →

Tuesday June 24, 2025 4:20pm - 5:00pm MDT
Bluebird Ballroom 3B

cdCon

11:00am MDT

11:20am MDT

11:55am MDT

12:15pm MDT

12:35pm MDT

2:10pm MDT

2:30pm MDT

3:05pm MDT

3:25pm MDT

3:35pm MDT

4:20pm MDT

Get help with the event