Skip to content
View wlynch's full-sized avatar
178 followers · 40 following

Achievements

Achievement: Pair Extraordinairex3Achievement: StarstruckAchievement: YOLOAchievement: QuickdrawAchievement: Pull Sharkx3Achievement: Arctic Code Vault Contributor

Achievements

Achievement: Pair Extraordinairex3Achievement: StarstruckAchievement: YOLOAchievement: QuickdrawAchievement: Pull Sharkx3Achievement: Arctic Code Vault Contributor

Highlights

Organizations

@tektoncd@sigstore@chainguard-dev@wolfi-dev@gittuf

Block or report wlynch

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
wlynch/README.md

Hi there 👋

Bio

Billy is a staff software engineer at Chainguard, working on developer tools and securing software supply chains for everyone! He is an active contributor and maintainer to the Sigstore and Tekton projects, and is the creator of gitsign. Prior to working at Chainguard, Billy worked on several developer tool teams at Google including Cloud Build, Google Code, and Cloud Source Repositories.

Talks

DateTitleEventLinks
June 2025Securing OIDC Federation in CI/CD WorkflowsOpen Source Summit NA 2025Recording
June 2025Billy and Eddie's Declassified Git Survival GuideOpen Source Summit NA 2025Recording
April 2024Securing Git Repositories with GittufOpen Source Summit NA 2024Recording
May 2023Identity-based Source Integrity with GitsigncdCon + GitOps Con NA 2023Recording
February 2023Lightning Talk: Securing Your Source Repositories - 5 Tips to Get Started!Cloud Native Security Con NA 2023Recording
October 2022Source Attestations with GitsignCloud Native Security Con NA 2022Recording
September 2022Gitsign - Keyless Git Commit SigningSupply Chain Security Con @ Open Source Summit EURecording
September 2022Keyless Signing with Tekton and SigstoreCDF Mini-summit @ Open Source Summit EUSlides

Pinned Loading

  1. sigstore/gitsignsigstore/gitsignPublic

    Keyless Git signing using Sigstore

    Go 1.1k 86

  2. tektoncd/chainstektoncd/chainsPublic

    Supply Chain Security in Tekton Pipelines

    Go 274 162

  3. tektoncd/pipelinetektoncd/pipelinePublic

    A cloud-native Pipeline resource.

    Go 9k 2k

  4. tektoncd/triggerstektoncd/triggersPublic

    Event triggering with Tekton!

    Go 591 428

  5. google/go-licensesgoogle/go-licensesPublic

    A lightweight tool to report on the licenses used by a Go package and its dependencies. Highlight! Versioned external URL to licenses can be found at the same time.

    Go 1k 138

  6. bradleyfalzon/ghinstallationbradleyfalzon/ghinstallationPublic

    HTTP Round Tripper for GitHub Apps - Authenticate as an Installation Workflow

    Go 375 110