WordPress Users

Bonsoir à tous! Venez nombreux pour causer autour d'un repas ou d'un verre chez La Madeleine. On n'a que deux règles: (1) qu'on y parle exclusivement le français et (2) qu'on achète quelque chose à boire ou à manger (c'est La Madeleine qui le demande). Merci et à bientôt!

Let's meet to chat and work on WordPress projects! If you're running into problems, bring them and we'll look for solutions together. All are welcome. We're meeting at Frederick Social. Parking is available at the Court Street garage, accessible from South Court Street and Citizens Way, for $1 per hour. Street parking is less convenient, but is available on South Market Street and West Patrick Street for $2 per hour.

Join us for Beloved Yoga at Reston Metro Plaza! Enjoy complimentary fitness classes every Monday and Wednesday from May 27 - September 2!

We’re excited to bring the community together for an evening of learning and connection. This time, we'll have a community member from Chainguard sharing a use case and, as usual, an Elastic employee sharing their expertise as well. Come support your fellow developers, learn something new, and meet others who are passionate about search, observability, and security. **Date and Time:** Tuesday, May 19th, from 5:30-7:30 pm EDT **Location:** Elastic Arlington Office - 4100 Fairfax Drive, Ste 500, Arlington, VA 22203 **Agenda:** * 5:30 pm: Doors open; say hi, grab a seat, and eat some food. * 6:00 pm: The SBOM Pile in Your S3 Bucket: Turning Bills of Materials Into a Risk Dashboard; and Watching It Shrink with Chainguard, by Mike Barreta, Senior Manager, Engineering at Chainguard * 6:30 pm: Q&A * 6:40 pm: **Agentic Observability: Next-Gen Alerting and Auto-Detected Significant Events**, by Jason Rhodes, Senior Manager, Software Engineering at Elastic * 7:10 pm: Q&A * 7:20-7:30 pm: Networking & refreshments **Talk Abstracts:** **"The SBOM Pile in Your S3 Bucket: Turning Bills of Materials Into a Risk Dashboard; and Watching It Shrink with Chainguard**" Most organizations now generate SBOMs because someone — EO 14028, a FedRAMP auditor, an ISSM — told them to. They land in an S3 bucket, get versioned, and are almost universally never queried. This talk is about what happens when you finally do. I'll stand up a self-contained Elastic stack, pour in SBOMs (SPDX), SLSA provenance, Sigstore signatures, Grype vulnerability scans, the CISA KEV catalog, and OpenVEX adjudication for 30 container images, and show the queries that only become possible once SBOMs stop being compliance artifacts and start being telemetry: which packages I actually run right now, which CVEs are real exposures versus VEX-suppressed noise, what swapping a stock image for its Chainguard equivalent would buy me, and how much of my CVE list is just stuff I inherited from the base layer. Then the cleanup. The same dashboards on Chainguard images show what disappears when the SBOM is small, the signatures verify, and the advisory feed is active: \~9,000 fewer CVEs and \~2.5 GB saved across 20 image pairs, KEV exposure dropping from 7 hits to 0, compliance pass rate going from 0% to 76.5% against NIST 800-218 / FedRAMP Moderate / SSDF. **Bio:** Mike Barretta leads Chainguard’s public sector solutions engineering team, focused on helping ensure the federal government receives its fair share of the future. Barretta has worked across civilian, defense and intel programs in a variety of roles—software developer, data scientist, solution architect—for a variety of organizations—system integrators, consulting companies, software vendors—with the common purpose of creating and championing technologies and techniques for simplifying the extraction and utilization of information from lots of data. Having witnessed the ever-increasing threats to those systems, Barretta is now focused on methods and mitigations to secure them **Agentic Observability: Next-Gen Alerting and Auto-Detected Significant Events** We're rebuilding Elastic's alerting engine to make alerts more flexible\, more powerful\, and more valuable as data\. Next\-gen alerting rules will run anything ES\|QL supports and capture whatever fields matter to you\, so alerts carry the context you need for real downstream analysis\. And if you'd rather not manage these rules yourself\, AI agents can help\, drafting them from natural language\, recommending tuning and configuration changes\, and reducing noise through deduplication\. On top of this, we're also building a new Significant Events system which automatically builds a continuously updated knowledge base of your incoming data's own metadata. Using this deep understanding, our agentic tools will detect significant events from log patterns, anomalies, and predicted behavior — without you having to create a single rule. **Bio:** Jason Rhodes is a software engineering lead at Elastic, where he works on alerting and observability features. Based in the DC area, he has over 15 years of experience in software development and has been an active contributor to the local tech community — creating and organizing Baltimore NodeSchool and charmCityJS. When he's not writing and reviewing code, he's probably watching too many movies. **Parking:** * The building’s parking garage is operated by Colonial Parking and is located off N. Randolph Street * Book a spot on[ SpotHero](https://spothero.com/search?kind=address&latitude=38.8818514&longitude=-77.1095268&search_string=4100+Fairfax+Dr+%23500%2C+Arlington%2C+VA+22203%2C+USA) * A Metro Station is located across the street

[Profs and Pints Northern Virginia](https://www.profsandpints.com/washingtondc) presents: **“Popes and Politics,”** on the history of clashes between pontiffs and world leaders, with Vanessa Corcoran, medieval historian at Georgetown University and scholar of the history of the Roman Catholic church. [Advance tickets: $13.50 plus sales tax and processing fees. Available at [https://events.ticketleap.com/tickets/profsandpints/northern-virginia-popes-politics](https://events.ticketleap.com/tickets/profsandpints/northern-virginia-popes-politics) .] President Trump recently shocked many by unleashing personal attacks on Pope Leo XIV, the first American-born pope, in a post on the Truth Social platform. Trump has been widely criticized by religious leaders for these remarks, made in response to the pontiff’s advocacy of peace with the U.S and Israel at war with Iran, and for his separate posts of AI-generated images depicting himself as a pope and as Jesus. For his part, Pope Leo has told journalists, “I am not afraid of the Trump administration,” and has found himself at the center of a heated debate over the proper role of any pope when it comes to commenting on global politics. As unsettling as such developments might be to Roman Catholics, they’re hardly unprecedented. Disagreements between popes and world leaders go back to the Middle Ages, and have played a significant role in shaping the Church and its role in the world. Explore the long history of popes’ conflicts with politicians with Vanessa Corcoran, a historian of the Roman Catholic Church who previously has given excellent talks on papal conclaves and the evolution of nativity scenes. She’ll discuss fascinating developments such as the fourteenth century Avignon Papacy, when Philip IV of France got the upper hand in a feud with the Church by pressuring a papal conclave to select a French pope and then getting the church’s leadership relocated from Rome to Avignon for nearly 70 years. In drawing parallels between recent events and medieval attacks on the Church’s authority she’ll describe how today’s anti-Church memes echo the anti-pope and anti-Catholic images that Martin Luther disseminated in large numbers with the help of woodcut printing. We’ll look at tensions between past presidents and past popes over not just wars, but issues such as abortion, stem-cell research, and abortion access. The talk will leave you with a deeper appreciation of the inherent tensions between politics and matters of faith. (Doors: $17, or $15 with a student ID. Listed time is for doors. The talk starts 30 minutes later.) Image: From an 1866 Nicolò Barabino painting of the death of Pope Boniface VIII after he was kidnapped and held captive for three days at the behest of King Philip IV of France (Usher Gallery / Wikimedia Commons).

Laser tag with the GLTech community

Consider it cancelled if it’s raining (Sorry, not at that level yet 😬) Maybe one day!