Marina Moore is a research scientist with a PhD from NYU and over a decade of engineering experience focused on software supply chain and container runtime security. She leads research at Edera and co-chairs the CNCF TAG Security, where she shapes community-facing security guidance, organizes events, and authors white papers. An active open source maintainer, Marina contributes code, specs, and reviews to high-impact projects like The Update Framework (TUF), in-toto, Uptane, SBOMit, and Sigstore, bringing research into production through tangible tooling and governance. Her background includes hands-on backend work on projects such as the versioned noms datastore and security-hardening of python-tuf metadata and key management. Known for bridging rigorous academic research with pragmatic open-source stewardship, she drives adoption of secure update and provenance practices across the cloud-native ecosystem.
11 years of coding experience
1 year of employment as a software developer
California Polytechnic State University, San Luis Obispo
Doctor of Philosophy - PhD, Computer Science, Doctor of Philosophy - PhD, Computer Science at New York University
Python reference implementation of The Update Framework (TUF)
Role in this project:
Back-end Developer & Security Engineer
Contributions:58 reviews, 39 commits, 26 PRs in 3 years 5 months
Contributions summary:Marina's contributions focused on improving the TUF (The Update Framework) Python implementation, specifically addressing metadata versioning and security aspects. They added checks for minor version differences in metadata, and replaced deprecated methods. They also implemented changes to improve key management, delegation, and keyid verification in relation to the TUF specification. The user’s work centered around bolstering the security of the software update process.
Contributions summary:Marina primarily focused on modifying and testing data store functionalities within the noms repository. Their contributions involved changes to the `clients/flags` package, including tests for parsing datastores and datasets from various sources such as HTTP, LDB, and memory. The user also introduced the `noms-ds` command, demonstrating a focus on command-line interface development for interacting with data stores and datasets. These changes indicate a focus on improving data storage and retrieval capabilities.
relational-databaseversioneddatabasedatabases
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.