The Open Source Vulnerability (OSV) Scanner Releases Support for Drupal Security Advisories - project showcase
Time: Wednesday 13th May 11:40-12:10
Room: Waterfront
Track: Web Tools & Complementary Technologies
This session tells the story of how Ackama’s open source contributions to OSV Scanner on open source vulnerability detection evolved and the 2025 collaboration with OSV (a Google supported project) and Drupal Security Team. The project was an open source contribution from Gareth Jones that developed into a proud Ackama partnership with OSV.
We will cover:
-The launch of OSV - what problems does the project address and why did Ackama recognise the value of the tool.
-Demonstration of the OSV service
-Why OSV Scanner has value beyond the existing Drupal Security Advisories approach
-Collaboration & Community: Working with the Drupal Security Team to develop a proposal and gain buy-in
-Real-world Impact: How you can use OSV-based tools today to automate security monitoring
-Happier CISO and security auditors
-Better automation in the future. Tools that already support OSV advisories could eventually use this new database to do automatic security updates of Drupal packages.
We will cover:
-The launch of OSV - what problems does the project address and why did Ackama recognise the value of the tool.
-Demonstration of the OSV service
-Why OSV Scanner has value beyond the existing Drupal Security Advisories approach
-Collaboration & Community: Working with the Drupal Security Team to develop a proposal and gain buy-in
-Real-world Impact: How you can use OSV-based tools today to automate security monitoring
-Happier CISO and security auditors
-Better automation in the future. Tools that already support OSV advisories could eventually use this new database to do automatic security updates of Drupal packages.
Speakers
Gareth Jones
Gareth Jones serves as the Head of Platforms at Ackama, with a broad technological background encompassing various platforms.
In his role as the technical lead of Ackama's Code Care team he oversees infrastructure and monitoring across all our client’s systems, playing a pivotal role in ensuring their functionality. He manages security patches, infrastructure maintenance, and incident response. Gareth adeptly handles client expectations, ensuring prompt bug resolution and efficient feature integration.
Gareth's contributions extend to impactful maintenance roles in diverse open-source projects such as currently with Google to enhance the OSV detector's functionality, a significant tool offering open-source developers streamlined access to tailored vulnerability insights for their projects.
In his role as the technical lead of Ackama's Code Care team he oversees infrastructure and monitoring across all our client’s systems, playing a pivotal role in ensuring their functionality. He manages security patches, infrastructure maintenance, and incident response. Gareth adeptly handles client expectations, ensuring prompt bug resolution and efficient feature integration.
Gareth's contributions extend to impactful maintenance roles in diverse open-source projects such as currently with Google to enhance the OSV detector's functionality, a significant tool offering open-source developers streamlined access to tailored vulnerability insights for their projects.