SCORED 2026 is being offered this year as part of OpenSSF Community Day Europe. You can see the full schedule here Below is the list of SCORED-specific events

Opening Remarks (10:30)

PC Chairs

Session I

Ghost in the Codebase - Why Your LLM Needs a SCA/SAST Baybsitter - Luca Galli, Open Systems AG - (10:40)

Luca Galli, Open Systems AG

Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation (11:02)

Aman Sharma, KTH Royal Institute of Technology

Sandscope: A Behavioral Audit Layer for MCP Tools in LLM Agent Supply Chains (11:22)

Run Hao, Aarhus University

Librarian Catches Theif: Surfacing Supply Chain Attack Campaigns via Document Similarity in an AI Agent Skill Registry (11:42)

Gale Fagan, Brightflag

When Models Meet Loaders: Deserialization Risk in Huggingface (12:02)

Jens Dietrich, Victoria University of Wellington

David A. Wheeler, The Open Source Security Foundation (12:22)

David A. Wheeler, OpenSSF

Session II

Canary in the Code Mine: Predictive Risk Scoring for Open-Source Supply Chain Security (13:55)

Timothy Brennan, Raytheon

No Snake Oil: Verifying Python Package Builds (14:17)

Yibin (Spencer) Sun, Victoria University of Wellington

Hurry Up and Wait: Malware Detection Timelines and Minimum Release Age for npm (14:37)

Dominic Tassio, University of Kansas

Did you Forkget It? Detecting One-Day Vulnerabilities in Open-source Forks With Global History Analysis (14:57)

Romain Lefeuvre, IRISA, Inria

Session III

Software Dark Matter: Gazing at Uncharted Files to Navigate SBOM Integrations (15:45)

BEST PAPER AWARDEE

Abhishek Reddypalle, Purdue University & Dennis Roellke, Bloomberg

When Dependencies Become Lemons: A Multivocal Review of Cheap Trust Signal Collapse in the Software Supply Chain (16:06)

Ranindya Paramintha, North Carolina State University

When SBOMs Differ: A Large-Scale Empirical Study of Generation, Dependency Structure, and Regulatory Alignment (16:27)

Lukas Gehrke, Technical University of Munich

Mind the Gap: How SBOM Specification Ambiguities Lead to Divergent Software Bills of Materials. An Emperical Tool Study (16:48)

Philippe Boinot, ANSSI; Olivier Zendra & Alan Prad, Inria Rennes

Over the Shoulder: Improving SBOM Accuracy by Watching the Build (17:07)

Sanchit Sahay, New York University

SCORED Closing Remarks (17:25)

PC Chairs