OSS Supply Chain Security
Google

Bob Callaway

Bob Callaway is the leader of Google’s Open Source Security Team (GOSST), spearheading initiatives to bolster the security of open source software, benefiting both Google and the global community. Under his leadership, the GOSST team develops and contributes to projects that address critical areas such as supply chain integrity, observability, and vulnerability management. GOSST also plays a pivotal role in managing essential internet infrastructure services, including OSV, Sigstore, and Certificate Transparency logs. Bob’s influence extends to advisory positions in key organizations: he serves as a member of the Technical Advisory Council for the OpenSSF, is a co-founder and technical steering committee member of Sigstore, and represents Google on the Alpha-Omega project leadership team. His extensive experience includes engineering and leadership roles at Red Hat, NetApp, and IBM. Bob holds a PhD in Computer Engineering from NC State University, where he also shares his expertise as an adjunct assistant professor in the ECE department.

Principal Security PM Manager
Microsoft

Michael Scovetta

Michael Scovetta leads a security team at Microsoft, focused on understanding and addressing emerging security threats related to open source software and the ecosystem around it. He and his team do this by building security tools, advising engineering teams, and evangelizing good practices. Within OpenSSF, Michael co-leads the Alpha-Omega project and leads the Identifying Security Threats working group. Michael brings around 25 years of software engineering and security experience and earned a Master of Engineering in Computer Science from Cornell University and  Bachelor of Science from Hofstra University.

AWS
Principal, Open Source

Henri Yandell

Henri specializes in large-scale organization of Open Source. Starting as a committer with Jakarta and Apache Commons projects in 2001, he has served on Apache Software Foundation legal and security committees, and as a board member. From 2007 he has led Open Source at Amazon, tackling licensing, upstreaming, company projects, and now the growing field of open source security.

Technical Strategist

Michael Winser

Senior Program Manager
The Linux Foundation

Michelle Martineau

Michelle Martineau is the senior Program Manager for Alpha-Omega, an OpenSSF project, leading core business operations and grantee relations. Michelle brings over 8 years of experience in project optimization and program strategy with a focus on process improvement and building teams.

Program Manager
The Linux Foundation

Tracey Li

Tracey Li is the Program Manager for Alpha-Omega.  With over 20 years of experience, Tracey has spent her career accelerating execution and driving successful outcomes.  She enjoys cutting through the clutter and working with stakeholders to deliver results that meet overall objectives without sacrificing individual goals.