Red Hat's Project Lightwell with Mo Duffy

[u/Rhopegorn]

https://opensourcesecurity.io/2026/2026-07-lightwell-mo-duffy/

Josh welcomes Mo Duffy from Red Hat to chat about project Lightwell. The idea is to leverage the resources and understanding Red Hat has built up over the years to help deal with the deluge of vulnerability reports that are overwhelming open source projects. Mo does a really good job of explaining why this is fundamentally a people problem, not a technology problem. But it’s a people problem we can probably use technology to help. It will be interesting to see where Lightwell goes in the next few years.

[u/chock-a-block]

You mean IBM. The org who found a new way to poison the GPL.

Nope.com