DevRel engagement with Security Toolbelt SIG

[sevansdell]

https://github.com/ossf/toolbelt is looking to have an ongoing dialog:

• DevRel weekend warrior maintainer perspective
• how to engage with distributed talks (e.g. local DevOpsDays)

[webchick]

@sevansdell presented some of what you're working on at the Devrel / Community meeting today and HOLY COW THIS IS AWESOME!

A few notes:

• We talked about gathering names / contact info of folks ahead of time so we can later consult them in a "user experience" perspective. One idea was a QR code that leads to a Google Form that we distribute at our booths, at meetups, etc.
  • In between those things, the #maintainer-experience channel was created so folks have a place to hang out while we're not ready for them yet.
• Sarah also shared the idea of making a pre-made talk (for the purposes of enabling other people to give the talk) that shows a very clear before/after of why something like toolkit is important. A before/after type of thing with "Evil PR" and then a one-click BOOM, solved.
  • @mlieberman85 shared his repo https://github.com/mlieberman85/supply-chain-examples which has some of these that help get to the "why" of the various checks.
• Once that talk/demo is ready, we have space at https://github.com/ossf/DevRel-community/tree/main/talk_templates to put a library of ready-to-go decks that can be copied/modified and given by others.