Open Source in Finance Forum New York 2022

Securing the app development lifecycle early on and incorporating security through a transparent and consistent process is key in building any production level applications. On a daily basis, how often do you build your application? Now think, how often do you scan for vulnerabilities in the code? This is mostly an afterthought, and is not always considered as the easy part of developing any applications. The recent vulnerability exploits reinforced the need for a secure development lifecycle. Simplifying and automating the process all in a single pull request makes it much easier for any app developer to add security in their pipeline. This talk will cover how to leverage available open source tooling to build and test an application, run security scans across it, and package it for shipping. The session will also provide a step-by-step demonstration on how to set it up all within a pull request and push the application to a production environment in a consistent manner.

As developers and organizations evaluate where and how to adopt and/or participate in open source projects, many will attempt to collect data and metrics around open source communities to support these decisions. This talk will share common practices around open source project measurement - discussing data sources and metrics selection, as well as presenting a framework for assessing non-security related open source risk.

Do you use or produce software that includes charts or graphs? Are you making your charts and graphs accessible to blind users, current or future? Do you have legal requirements to remediate existing charts and graphs for accessibility? If you aren't currently addressing accessibility for screen readers, this talk will cover the industry standards. If you are following industry standards, this talk will cover how underwhelming those standards are, and what you can do about it to set your product apart from the competition. Julianna Langston has written an open source javascript library, Chart2Music, which provides an easy way for developers to seamlessly integrate accessibility into their charts and graphs without having to take on privacy or maintenance concerns, and while delivering a delightful experience to end-users.

presentation slides are viewable at this link:
https://docs.google.com/presentation/d/11tbGkiBO6_Jisst7oBT93E41CthNZEjcvji8791ogLc/

Building high performing teams is hard. How is it possible for open source projects to get thousands of stars and tens of thousands of followers when you can't get two developers to collaborate? In this session we will look at using open source concepts to drive collaboration and best practices. We will also determine what types of measurements are important to determine which projects should be secured based on the type of contributions being made across the organization. If you are concerned about onboarding, collaboration and/or developer efficiency, this session is for you. Come learn more about how OSS best practices can drive better communication inside your organization.