BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.3mdeb.com//bsmconf//speaker//RNMYPR
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsmconf-WRET9B@cfp.3mdeb.com
DTSTART;TZID=CET:20260924T171000
DTEND;TZID=CET:20260924T174000
DESCRIPTION:Public scoring tools will cheerfully report that your firmware 
 is "compliant with warnings"\, but addressing the fix priorities is anothe
 r story. We closed that gap on BenchRack with two internal tools: EAP (Eco
 system Alignment Program) and SAM (Stack Alignment Manifest) which emits a
  business decision report with a verdict a maintainer or a manager can act
  on.\n\nThis talk showcases the public scorers ran against a BenchRack\, a
 nd how EAP and SAM turned their warnings into addressable backlog - helpin
 g us increase our CRA scoring and automate fixing compliance gaps in discr
 ete timeframes. It also demonstrates how\, with the usage of in-house tool
 ing\, which continuously reconciles current upstream firmware component ve
 rsions against the CycloneDX SBOM (Software Bill Of Materials) of the bina
 ry we actually ship\, we can hack paperwork-style compliance requirements\
 , having them be automatically generated call to action in practice.
DTSTAMP:20260826T141337Z
LOCATION:GPN-T Main Room
SUMMARY:Unboxing Compliance: tooling lessons learned from scaling our Bench
 Rack score - Kamil Aronowski\, Artur Raglis
URL:https://cfp.3mdeb.com/bsmconf/talk/WRET9B/
END:VEVENT
END:VCALENDAR