Now you're a year closer to those players being major league ready So it had never made sense to me that the Yankees might suddenly pivot and go after one of those short stops Because when you have your own owner and how Steinbrenner talking about wanting to give these kids a chance flash I'm not surprised that Correa is not on their radar Yeah, there are so many reasons that you would want Correa on your team Obviously a great player great player during the postseason in the clutch But when you look at this situation and you guys hear me talk all the time the superstars are gonna get their money And then you're gonna have to have the other side of it where young players are gonna have to field some positions Where they're not making as much money It just makes a lot of sense when you have Paraza and Vulpia on the way that the shortstop position would be a position You can go young and you know cheap is not the way to put it But they would be making a rookie salary so there is a little balance there So I just think this is a situation Paraza did so much at the end of the year to tell everybody not only how he played on the field But how he handled himself in the clubhouse He's ready to be a major leaguer and you'd expect Vulpia to be following right behind and mate Yeah, maybe it doesn't happen all at once But maybe it's Paraza out of the gate Vulpia gets some more reps at AAA We see him maybe June July something like that and then we also have to remember they brought back I see a counter for left on a one-year deal Right, I think Paraza is the favorite to be the starting shortstop even though I kf is looming I think the Yankees are ready to give a youngster an opportunity


Now, ground beef. What is in ground beef, you ask? Ground beef. All right guys, welcome back to the channel. If you're new, my name is Robbie. Guys, today we have a special video by Liv B. The nine vegan alternatives I can't live without. This video is very special because Liv will show us what she eats instead of real animal foods. It will be a systematic review.  Let's do this. Hey guys, it's Liv. Welcome back to my channel and if you are new here, hello, I am Liv and I create easy vegan recipe videos on this channel. So today I am not coming at you from my kitchen, obviously. So today I'm going to be talking about the nine vegan alternatives and products that I cannot live without. That title is a little bit of an exaggeration. Obviously, in order to be vegan, you don't need like cheese and meat substitutes or you don't need super processed products. I personally don't have a problem with eating processed vegan alternatives. I think it helps a lot. Nobody actually does. Vegans will always tell you eat a whole food plant based diet, a sensible whole food plant based diet. In the end, nobody does because everybody craves meat. A lot of people with the transition to going vegan and also I really like vegan cheese, which I'll talk about in this video. But I thought that I'd share with you guys the ones that over the years I have found to be like my tried and true go-to favorites. These are things that I buy at the grocery store. Get to it, please. These are truly the things that I just absolutely love and are made by companies who I think are killing it. So without further ado, let's begin. Okay. Companies that are killing it. Yes, they are killing it. They're making money of gullible customers that will buy processed junk food instead of real food. So the first one is the DEA medium cheddar style farmhouse. What else? Yes. Comes in a package like this. DEA is a brand who has always had people who either love it or hate it. And people just love to hate on DEA. Recently, they were purchased by a company that I don't know which company it is. Okay, let's interrupt it right there. Let's see what is in DEA.  This is the exact same product that Liv uses in her video. And here you have the ingredients starts innocent with filtered water but continues with tapioca starch, coconut oil, vegan natural flavors, whatever that is, pea protein isolate, non GMO, expelopressed canola oil, chicory root extract, salt, xanthan gum, lactic acid, which is vegan, tricalcium phosphate, pea starch, potato protein, vegan enzyme, cane sugar, annatto, which is some sort of coloring and coconut cream. And that leaves us with six grams of fat, seven carbs, which is absolutely ridiculous for cheese to have so many carbs and one gram of protein, one measly gram of protein. Now let's have a look at real cheese. Here we go, cheese ingredients. The main ingredient in cheese is milk. That is pretty much it, cultured milk equals cheese. And here you have the nutrition facts for the equal amount. That is 28 grams again, just to make sure. See 28 grams compared to 28 grams. We have nine grams of fat and we have zero carbohydrates, super important. And on top of it, seven grams of protein. Of course, we don't even start to count the vitamins such as vitamin A, a little bit of vitamin D, B12 of course, and calcium as a sensible normal rational person, you will realize that there is absolutely no replacement for whole food. Let's proceed. Recently, they were purchased by a company that I don't know which company it is. I wish I did. I'll put it on the screen. Wait a second. So recently, DEA has been purchased by a Japanese pharmaceutical company called Otsuka. Yeah, that makes perfect sense because it is not food. It is produced by pharmaceutical complexes. And of course, that makes perfect sense because it's nothing but chemicals. The second thing is artisan vegan cheese made in Montreal. So again, to Canadian companies. So this is the Italiano Gusta Artisanal Vegan Grating Block. Before I even tried it, I was like, okay, that says to me that they don't want you to eat this just on its own. And if you were to open this up and why and eat it with crackers. Okay, let's have a closer look. So on the original Gusta foods homepage, I couldn't find any ingredients. So we have to take Google's word for it. Ingredients starts again with water, organic coconut oil, modifier starch, tapioca again, pea protein, which is an isolate, sea salt, nutritional yeast, vinegar, garlic powder, yeast extract, white vinegar powder, natural flavors, and spices. And here just a quick reminder again, dear viewer, regular cheese is made out of milk. That is it. You probably would be disappointed. I don't like eating this. I guess you call it raw. No, you don't call it raw because it is not raw. It's all just processed chemical slop. It has nothing to do with a raw food. Okay, the next thing vegan basil. I feel like this is a Canadian product for some reason. I don't think they have it in the States. If I'm wrong, let me know. But every time I went to the States. Okay, great choice. Basically, margarine, nothing more and nothing less. Of course, it is easy to be repackaged and sold to the best customers on this planet who are the vegans as vegan basil margarine. It is nothing but canola oil. Let's have a closer look. And here we go. Vegan basil ingredients. Oh my God. Ingredients. Canola oil and sunflower oils, 74%. Water. Modified palm and palm kernel oils. Fantastic for the environment. Super vegan, salt, natural flavors. Again, whatever that means, lactic acid, vitamin A palmitate, vitamin D2, natural color, soy, lecithin. On that note, of course, this is not true, vitamin A, which you would find in animal foods. It is a synthesized chemical supplement. So now what would be the real ingredient? What is the whole food? The best case scenario, hands down, would be raw butter. Raw butter ingredients are raw cream and ice cold water. That is pretty much it. Of course, you can add sea salt to it, but that depends. It is not a must. We have butters with and without salt. Unfortunately, I couldn't find the nutrition effects for raw butter. But even if we check regular pasteurized butter, we see zero carbs, first and foremost, and a staggering amount of 49% of the daily RDA of vitamin A. We have vitamin D, which is of course vitamin D3 and not vitamin D2 like in the supplemented plant equivalents. So yet again, an absolute failure. Yes, maybe you came close to the taste of an animal food. However, you have no nutritional value. 98% plant based ingredients and like 2% milking. Exactly. That is very true. And we very well established that it leads to heart disease. Canola oil, all those pressed vegetable oils create heart disease. Simple as that. They came out with their vegan based oil. Enough of that. Let's move on. Okay, this next one, I also, this is truly, I don't know how I could live without it, because we buy two of these every single week. We go through this stuff like you wouldn't believe. So this is the earth's own so fresh. Did anybody notice she tries to replicate dairy in every single meal? Yes, I understand that it's called the nine vegan alternatives. However, an alternative, a true plant alternative could be, hey, there's a beef burger. Now we're going to eat a bean burger. But all of those alternatives try to replicate the real thing. So now let's have a closer look at earth's own old milk. Show me the nutrition. So at a first glance, that looks pretty good, right? Hey, we're vitamin A in this old milk that is magical, enough calcium as well, and even 50% B12. But not only micronutrients, we do have four grams of protein on 250 milliliters. That is not little, right? Well, not so fast, dear vegans. If you look into the ingredient list, you will see it is an oat base, which means water and gluten free oats. Then we have sunflower oil, again, super bad for heart health. We have gel and gum, salt, natural flavors, amylase, which is crazy because amylase is an enzyme that breaks down starch. You, as a starch eater, as a herbivore, you wouldn't need it, right? But to digest this milk, yes, you do need added enzymes. And on top of that, we have the vitamins and the minerals, right? No, we have supplements, we have tricalcium phosphate again, we have vitamin A, palmyllite again, vitamin D2, riboflavin, vitamin B12, zinc gluconate. So this is not a food, this is simply a supplement beverage, nothing more and nothing less. So now, what is the real thing? What is the real food that actual humans eat or drink? It would be, of course, raw milk. So here you can see that they desperately try to recreate the nutritional micro profile of real raw milk, vitamin A, iron, calcium, and of course, all the soluble vitamins, B12, D, so on and so forth. If you drink raw whole milk, you do not need any supplementation. Simple as that. In any case, you do realize that the statement I can't live without is absolutely true because without the fortified foods, without the supplements, she couldn't even maintain her diet for a couple of weeks. But yeah, this is oat milk, it froths so well in my milk frother. Real milk throbs even better. In one cup of this, it has 50% of your recommended B12 for the day, it has 30% of your calcium, it's got vitamin D, so it's just it's fortified, same as dairy milk, so drinking.  Just gulp it down. It is nothing but a supplement. This is not real food. Coffee creamer. There is one silk coffee creamer that I like. It's the hazelnut one, but all of the other ones, I do not like them. I cannot drink them. Something about them is just too, it's too sweet. I don't know if they have stevia in them or something, but they have something in them. If you would use regular milk, you would have lactose and naturally occurring sugar and it would taste just fine. They're just too much and that's coming from someone who likes really sweet coffee. This one, however, was discovered by my sister and it is just the coffee mate, almond, bliss, coffee enhancer, that's what it's called. Coffee enhancer. Great, let's see how it will enhance the coffee. So, here are the ingredients. Water, cane sugar, almonds, coconut oil, pea protein, baking soda, natural flavor, sea salt, gelangam, guergam. That is the enhancement that I need for my coffee. Right now, when you start analyzing those so-called vegan foods, you will see a repetitive pattern. It is always the same ingredient. Don't you see that it's always the oils, always the pea protein, always the gums, always trying to replicate some sort of animal consistency, desperately trying to recreate the real thing. And of course, failing to deliver proper nutrition. I hear the vegans scream already, yes, but coffee creamer isn't healthy anyways. Yes, that might be true if you use the instant creamer. What you can really use is cream or raw milk, all good. I could just hug it, I just, I love it so much. I wish they would sponsor me for honestly coffee mate if you're watching this. It doesn't love you back. It's gotta be the best spokesperson for you. Okay, the next one is vegan yogurt.  They have. Big ones, small ones, like just yogurt everywhere and they're all dairy free. It's shocking.  So this one is my new favorite find. This is the Riviera coconut milk or they call it vegan delight. It's got probiotics, it's got protein and it is so creamy, a lot of vegan. So creamy you guys. All right, so she tells us we do not need to eat dairy any longer because this here is the alternative. Again, let's have a look. Vegan delight, vanilla made with coconut milk, Riviera. Check this out. It already starts here. With vitamin A, added with vitamin B12, added with vitamin D, added yet again a fortified chemical concoction. Check out the ingredients. Coconut milk. That is the only thing that you could consider a food. Then it continues with a vanilla preparation, an innocent little vanilla preparation. So what does it consist of? Gainsugar, water, pectin. Again, the natural flavor, lemon juice, concentrate, locust bean gum, whatever that is. Tapioca flour, cane sugar, farber bean protein, pea protein, calcium phosphate, pectin, natural flavor on top on natural flavor. So now what do we learn from this ingredient list? An ingredient list usually back in my day, I know I'm getting old, was an ingredient list of foods. Now all of a sudden vitamin A and vitamin B12 became foods. How come? Where do you find them? None of this is food. Vitamin D, B12 and A, all of this is just chemicals, just supplemented, put into this yogurt. The same goes for the pea protein, the farber bean protein. All isolates, all chemicals, cane sugar. In regular yogurt you do not need to put in any sugar. So here, yet again, regular yogurt ingredients. The main ingredient in yogurt is milk. Nothing more and nothing less. Then you will add some sort of bacteria to it, let it ferment. Done. But even more important is, of course, the nutritional profile. This is the Riviera vegan yogurt. 20 carbs, measly four grams of protein, even though they already used isolated protein powders, and seven grams of fat. The rest, yet again, super disingenuous. Vitamin A 40%, yeah, 40% of a supplement. Meanwhile, if you look at real yogurt, you will see yet again, we have a staggering amount of 17 grams of naturally super bioavailable protein. And of course 21% of B12, real B12. The next thing I want to talk about is protein powder. Man, I just realized I have been on such a journey. Okay. After so much added supplements in your food, you still need a protein powder. I'm not going to even talk about this step. Let's just skip it all together. If you want to use a whey protein, ideally a grass-fed whey protein, then so be it. But this is not food. Okay, the next category is ice cream. I know that a lot of you guys probably won't be able to get this brand unless you live in Canada. This is the president's choice brand. This is their vegan coconut milk frozen dessert. They currently have, I think, four flavors. They have chocolate, mango, vanilla, and like peanut butter or something. Cool. Let's look into it. All right. Here we are again, president choice, chocolate dairy-free coconut milk frozen dessert. There's a tongue breaker. Ingredients, coconut milk, sugar, water, cocoa, tapioca, maltodextrin, dextrose, palmono, and daiglycerides, carob bean gum, gore gum, and sea salt. As you can see again, vegan food doesn't bind if you don't use gum. So now I do understand that regular ice cream isn't healthy either. However, if you look into the traditional preparation of ice cream, you will see that the composition was quite simple. Just milk, cream, and a sweetener. So now I can offer you, of course, a healthier alternative. You can use raw milk, raw cream, and as a sweetener, you can use raw honey. Then you have a healthy, nutritious, and delicious ice cream. It is a fantastic snack in the summer months, and it comes with all the bioavailable nutrition. That is amazing, not like this chemical concoction here with carob bean gum, gore gum, and whatnot. They killed it. It is just the absolute most perfect consistency every time it doesn't get too hard in the freezer. Like I could scoop out a chunk. It doesn't get too hard. It doesn't taste like coconut milk at all. This one's just perfect. I'm obsessed. But why don't you want it to taste like coconut milk? I do not understand.   You love the taste of plants, don't you? I love it. Okay. And the last thing is the light life plant-based ground.  This is what it looks like. It's frozen. I'm sorry. But it literally looks like ground meat. Look at this. It's like that weird texture. Why do you want it to look like meat? I don't understand this. I don't know. This stuff is so amazing. Amazing. It starts out pink and then when you cook it, it turns brown. Wow. Just like meat. Just like regular meat. Yes. And I know beyond meat has ground meat as well, but we don't have it here at Nova Slusha. I've never tried it. I've only ever tried the Beyond Burgers. Okay. Obviously, she craves meat. Let's have a look what is in that ground. So, here we go. Light life plant-based ground. Ingredients. Water. Pea protein. Explore pressed canola oil. Modified corn starch. Modified cellulose. Yeast extract. Virgin coconut oil. Sea salt. Natural flavor. Beet powder. For the coloring. What do we try to replicate here? Could it be blood? I do not know. Escorbic acid to promote color retention. Uh-huh. Onion extract, onion powder and garlic powder. Fantastic. All of that brings us 20 grams of protein, which is again a protein isolate. Has nothing to do with the whole food. And it gives us 10 grams of carbohydrates, 17 grams of fat. Again, ridiculous that you buy a meat that contains carbohydrates. Animal foods do not contain carbohydrates, especially not muscle meat. Now, ground beef. What is in ground beef, you ask? Ground beef. Of course, we do not have any carbohydrates here. We have 14 grams of protein, but that is less. The plant-based alternative wins. Do you really believe that the pea protein isolate will be assimilated just as good as the protein from beef? Of course not. The biological value is much, much lower. And what a plant-based alternative can never provide is, of course, B12, which we have in beef here 35%. I am shook that this even exists. Like, how do we live in a world that has vegan products that are so similar to meat products? It is astounding. Yes, it is astounding. How do we live in a world where we do have those products? Could it be that there is an agenda behind this? Could it be that there are huge corporations capitalizing on young people that do not have any idea about nutrition? Could it be that you are compromising your health, your family's health because of propaganda? Could that be? How can it be? I do not know. Guys, this is the video. It is long enough. As you can see, not one so-called alternative was truly that. Not at all. None of those foods provided any significant amount of nutrition. None of them all were just processed junk food. All of them contained chemicals and ingredients that you can barely read.  This is not food. This is poison. All right, guys, but this is for today's video. If you liked it, leave it a thumbs up. If you haven't subscribed already, please do so. And guys, if you want to support the channel, all the links are in the description box below. We have Amazon links for you. You can head over there, buy whatever you might want to buy, and it doesn't cost you anything extra.  That is a fantastic way to support Bobby's perspective. If you want grass-fed beef delivered to your doorstep, butcher boxes for you. And we have CBD links as well. On top of that, guys, consider supporting Bobby's perspective through Subscribe Star or Patreon. We have a VIP community there where we have Skype group calls every single week where we can discuss any topic, no matter if it is health, lifestyle or nutrition related. On top of that, by joining you straight away receive your comprehensive nutrition guide. It is an e-book that teaches you the basics of nutrition, but goes beyond as well and is catering to your personal goals, no matter if you're keto, primal, paleo or even raw. All right, but this is it. Thank you very much for your support, guys. And as always, much love and peace.


Hello, my name is Nathan Shears. My pleasure to speak with you this morning. I represent the Electronic Frontier Foundation in support of AB-1215, the Body, Camera, Accountability Act. Technology does have the power to improve our lives. It can make our government more accountable and efficient and expose us to new information. But it can also invade our privacy and chill our free speech. When communities across the state called for broader implementation of police body camera usage, they did so with hopes that greater transparency and accountability would facilitate trust between residents, particularly those in marginalized communities, and the officers sworn to protect them. However, today we stand at the crossroads as face recognition technology can now be interfaced directly with body worn cameras in real time, transforming a tool intended to improve accountability into a mass biometric surveillance network. Face recognition technology has disproportionately high error rates for women and people of color, making matters worse. Law enforcement agencies conducting face surveillance often rely on images pulled from mugshot databases, which include a disproportionate number of people of color due to racial discrimination or a criminal justice system. As a result, face surveillance will exacerbate historical biases born of and contributing to unfair police practices in Black and Latinx neighborhoods. Public safety requires trust between law enforcement and the communities they are sworn to protect. The utilization of face recognition technology and connection with police body cameras would force Californians to decide between actively avoiding interaction and cooperation with law enforcement or having their images collected, analyzed, and stored as perpetual candidates of suspicion. Not only would this further erode community relationships with law enforcement, but in fact escalate the likelihood of a tragic outcome to each interaction. We urge you to vote aye on AB 1215. Thank you.


Good morning, good afternoon, good evening. Wherever you're handling from, welcome to a brand new show here on the channel, Cloud Native Thursdays. Name's still kind of in flux, but I'd like to introduce you to the two hosts of the show, Josh Burkist and Amy Marich. Amy, you're the closest one to me in the Zoom window. Why don't you go first? Alrighty, my name is Amy Marich. As Chris already mentioned, I'm a Principal Technical Marketing Manager at Red Hat, especially an open stack. I serve on the Open Infrastructure Foundation Board of Directors and I'm core on a couple different open stack projects. Awesome. And I'm Josh Burkist. I work in the Red Hat open source program office. I've also been contributing to Kubernetes for almost as long as it's been in Kubernetes and have been involved in a bunch of different areas in the project. And I am very into everything Cloud Native. And so as our show unfolds over the next few months, you're going to see Amy and I are going to present a number of speakers and a number of topics around the full cloud stacks that people are implementing by all the way up from, in some cases, the individual CPU and GPU chips to application automation, depending on the speaker and the week. But this week, we are kicking things off with Luis De La Santas, who is a lead in the CLARE project for container security, container image security scanning. Before I add Luis, I know your position in the CLARE project, it just occurred to me. I didn't actually even look up your position. You work for Red Hat. I do, yeah, yeah. Principal engineer at Red Hat, creator of CLARE V4 and CLARE Core. Cool. Wow. Before we get this started, is there any administ review we have to take care of, Chris? No, just folks, please feel free to ask questions as we're going along, kind of treat this like an office hours if you want, right? And we'll engage the speakers as the questions come in. Yeah, and do ask questions. We can take your questions at any time. So go ahead and ask them in any of the mini chat streams and we will see them and read them out to the speaker who can field them. But in the meantime, Luis, do you want to get started explaining some basics of CLARE for anybody and the audience who is new to it? Yeah, definitely. So as you said, I'm a principal engineer on CLARE. I started the CLARE Core project which is actually the engine that powers the newest version of CLARE V4. As in this presentation that I have with me right now, we can cover, you know, what is CLARE? What's new in CLARE? Why should we even care about it, right? The internals of how CLARE is going to work, where it's being used and then some contribution information just because we're always looking for new contributions. So really like what is CLARE? CLARE is a scalable set of services that provides information to both developers and operations about your container's security. It's an open source project and it is community-developed. So why exactly should we care about CLARE, right? So as you know, we're all moving to Docker containers as the default way to ship and deploy applications. With this, we start migrating the attack vectors. Before Docker, we probably had Ansible setting up their application on servers, deploying dependencies. The splash damage from there was pretty confined, right? If you found out that, okay, I have a dependency with affected vulnerability, you're able to go to your own servers and change them. Now that we're moving into deploying applications via containers, that attack vector migrates everywhere that container may run. So it makes it a little bit obvious that your organization needs to care about its container security posture. So if you're familiar with CLARE v2 or if you're not, and you're just getting started with CLARE v4, these are the new things that we've added recently. There's now a manifest-focused API. Previously, in CLARE v2, it was a layer-based API. It was a little bit cumbersome. What had to happen is the person or the client who was making a request to CLARE needed to define the child-parent relationship of the layers before posting. If you're familiar with OCI manifests or any of the even Docker manifests, that child-parent relationship is actually comprised inside the list of layers that are in the manifest. It's a very obvious thing to do, but it does actually make a big difference in usability with CLARE v4. Content addressability is now a first-class citizen in CLARE v4. So I first heard this term in the storage industry as a way to take a unique identifier and make it always associate with a unique resource. I put a little star there because it's pretty important to how CLARE performs its work. So keep this in mind. We've updated all security advisory data sources. What this really entailed was no longer using ad hoc data dumps, not going out to GitHub. We standardized mostly on Oval where it was appropriate. There's still a few cases with some custom advisory information. AWS has their custom format. Alpine has a JSON dump on GitHub, maybe GitLab now, I have to check, but those places we can't really avoid it, but across the board elsewhere, we just went with Oval 2, which is great because we were able to standardize our parsing and it's a well-understanding specification. We now have a native CLI tool. So CLARE v2, previous versions of CLARE, dependent on an external repository, community-driven CLI tool, we brought that inside. We're now going to support that on our own. We completely rewrote the notification subsystem. We're going to dig into that a little bit more when I go into CLARE internals. We now have language support baked into the data model. This is a big plus for us. Previous versions of CLARE, they didn't really understand packages on a file system. They understood like, okay, this is like a RPM database. You can take a look at packages in there, but they didn't really understand, okay, like we have PIP and we have like sites, packages, directories. So now we built that into the data model of CLARE v4. So we want to begin adding a lot of package support within the next iterations, and we currently support Python. And then the big application architecture changes is that we went with a modern microservice design, which puts an emphasis on scale and performance. So as I'll demonstrate in just a bit, CLARE has broken up into microservices that can now asymmetrically scale depending on your performance profiles of the day. So if you're pushing a lot of containers, you can actually scale the set of nodes that deal with that, or if you're pooling a lot of containers and you want advisories, vulnerability reports, as we call them, a list of advisories that are affecting that container, you can scale that asymmetrically. So if there's no questions, yeah, I'm gonna go into that. No, actually there are in fact, a couple of questions already. Let's go. Number one, JP Dade wanted to confirm that CLARE is built into Quay. CLARE is, so historically speaking, CLARE is a Quay product. It is completely integrated into Quay. As we're going to talk a bit more about in a little bit later in the talk, it is being used quite extensively outside of Quay now too. So there's a little bit of flux in there, but yes, it's completely integrated into Quay. And most of the access of CLARE, you'll probably see online, if you're looking at tutorials, if you're looking at how to use it, you'll see it coupled with Quay. Yeah, and that's actually a great segue into the second question from Tanyway3. Can companies by support and run this on-prem and as much as you said it can be run separately? At this time, from a Red Hat product standpoint, it is bundled with Quay. So we don't have a service contracts. You can't run CLARE isolated as a Red Hat product, but there's nothing that stops you from doing that upstream, right? Just grab the upstream from us. There's abundant tutorials on how to get it up and running. And our documentation is pretty good. So always looking for feedback there too. So if you do want to give that a try, you'll have our emails to poke at us if you can't get it to work. Tanyway3, does that answer your question? I'm gonna assume so for now, but we'll ask again if we need to. Cool, okay. Yeah, so let's dig into a little bit of how CLARE works internally, right? So this is the 30,000-foot view of what CLARE accomplishes. This is the microservice architecture that I said earlier that we split CLARE up into. From a very high level, the indexer is responsible for taking a look at a container manifest. When it does this, it generates an index report. This is a report containing all the contents that was able to be found in that manifest, along with distribution information, whether it's a rel container, whether it's a Ubuntu container, and any repositories that we find, PIP repositories, MPM. I don't wanna allude too much on language support. Like I said, we only support Python right now. So we would say that we only find PIP repositories at this time. Once that index report is generated, you have the matcher service, which is responsible for having a database of vulnerabilities, accessing that index report, flagging the content in it, and then generating a vulnerability report. And then you have the notifier who just kind of hangs out down there. He watches the matcher and the indexer, and he's able to generate notifications to clients when new updates come into the system and inform those clients which manifests are affected by these new updates. So a new vulnerability comes in. We know that manifest X has this package that's associated with that vulnerability. The notifier will go and say, okay, let me notify the downstream that manifest X is now has this new vulnerability. You might wanna patch it. You might wanna push a new container to fix that. So to really dig into indexing a little bit further, indexing is a term we use for extracting the contents of a container. So to even give that more of a context and background, I'm gonna tell you what Claire sees as a container. What is a container in the context of Claire, right? So how Claire views this is a, there's a top level hash here. You'll notice that it's 604A. That denotes the manifest as a whole. Then there's an, and that's a content addressable hash. So I was talking about that a little bit ago, right? So this is a unique identifier that uniquely identifies this manifest as a whole. You'll see that the subsequent layers inside this container, E84B, DF08, CC40, those are layers and they have their own content addressable hashes. To obtain that manifest hash 604AC, it is a hash of all the layer hashes, right? So this builds somewhat of a hierarchy in the fact that Claire can understand if it's seen in manifests, it's also seen its layers. That's a little bit dense of a subject, but if you can understand that the manifest hash is computed over the layer hashes, then you can understand that the manifest as a whole can be identified by that. So now how does indexing actually work, right? And how does Claire go about extracting the contents of a manifest? First, it's gonna determine if the manifest should be scanned. In this case, Claire has never seen this manifest, right? It says 604AC, I've never seen you before. We're gonna go ahead and we're gonna actually put you in the scanning pipeline. So now it determines the layers to be scanned. So I express a common case here, right? That's the base layer. Claire might've seen that base layer a million times, right? Could be a UBI8 base layer. So it determines, hey, I don't need to scan this. I have a content addressable hash here, right? I see E8 for B in my database. I know the contents are the same. It says, hey, I'm not gonna scan that, but these two subsequent layers, okay, I do need to scan those. I've never seen them before. So now it scans only the necessary layers. That base layer goes right out to the database. It says, hey, give me the content that we've cached because this content addressable hash has not changed. I know the contents hasn't changed. Just give me what I know. And then for DF08 and CC40, that actually performs the scanning process. So why this is helpful is because Claire can do the least amount of work necessary, right? To scan a layer, we have to go out. We have to download it. We have to decompress it. We have to actually look through the tar, the tar bowl, and then find any kind of databases. So there's a lot of work there. So we want to minimize that amount of work. And luckily, the container specifications have this content addressability notion built in that allows us to just piggyback right on top of that. And then finally, it just generates an index report for the manifest itself. Any questions here? I have one.  Yeah, so it definitely depends on the image size, right? Like if you were to go and pull your bunch of latest relatively small image to take a matter of seconds, if you're to go pull like a larger image about one gig, you're looking at maybe like 30 seconds around there. So it really depends on how large that image is. We utilize Golang as the software that Claire is built in. So as you know with Golang, concurrency is a paradigm. So we're able to do a lot of things in parallel. And where we do set, there's concurrency limits on things just so we don't run away with that. But it's significantly quicker because we are doing it in Go and the parallelism is just lightweight. We can spawn off Go Routines pretty quickly. But yeah, that would be something, if you're an operator and you're using Claire, then that's probably something you actually do wanna spend some time tweaking, right? We give you a little bit of knobs.  So, but there might be some flags there that allow you to change, how many layers are pulled down in parallels, something like that. And if there's not, then you can definitely raise a ticket with us to see if you'd like to pull those things. And you've mentioned Docker support. We've had the question, does Claire support LXD? Claire just takes tarbles, right? So if you can place the layers in its manifest schema and we get a tarble and then we can extract it and then find RPM databases, I don't think the LXD format would stop you. I'm not actually super familiar with LXD. So that's a good follow-up question, but as long as it has a concept of layers in tarbles, you can take those layers and you can provide, you can basically type out or create a notion of our manifest structure, place those layers inside it and Claire can go and download them. There shouldn't be much stopping you from doing that with other types of container formats. Just a quick question actually from me, which is the hatches for the layers Are these being calculated by Claire or are we just getting them from the image build metadata? That happens on image build. Yeah, so whatever runtime you're using or image building software, whether it's Scopio or whether it's just Docker build, that's generating those hashes. We do check them though. So we'll actually do, you know, like usually it's a shot 256, I think, we'll like, we'll hash the content when we get it and make sure it matches. If it doesn't, we'll reject it because that's not really to spec, right? Cool. Okay, so now you have an index report, right? You have a report that demonstrates all the contents that we found inside the container. So now matching, so matching is a term we use for identifying vulnerable content inside a container. There's two major components with the matching infrastructure. You have what we call matchers. These are implementations of business code that understand how to match packages to vulnerabilities. So a good example is, you know, if we're looking at a RPM database, we most likely have a rel matcher that knows what RPM looks like and then also knows what the vulnerabilities that the pulp and rel exports and is able to match them together. And then updateers are, what you would suspect they are, there are these pieces of business logic and they run on intervals and they basically go and they find new content, new security databases, updates or just new ones in general and then pools in the advisories into their database. There's some smarts around there as far as, you know, doing less work, we try to see if any content has changed and we keep a fingerprint, but you could probably already imagine, you know, how updaters work, it's not incredibly complicated. So how does matching work? So matching is modeled after a data flow application. So when the metric goes and grabs that index report, right? The index report has all the contents that we found. It actually makes a content stream and it instantiates these matchers in parallel. This is another great thing about code, right? We're able to just really quickly and lightweight, in a lightweight manner, create these concurrent processes. So each matcher now gets this content stream and they just run through it. They just flag things as they see it. And once they're flagged, the matcher takes all those results, merges it and then gives back a final vulnerability report. So this is very nice because we can do things pretty quickly and also in the common case, only one of these matches is really doing work, right? Because it's not like we upload hybrid containers very often. It's not like you see something that shows characteristics of UBI-8 or rel instance along with Ubuntu. So, but technically, if you did send that our way, we would identify things correctly because of this parallel identification mechanism. So hybrid containers, it happens. It's very strange and it shouldn't happen, but if you put an OS release file and a LSB release, I think, Ubuntu's one, they will show up and it's like, hey, we identified this is some kind of hybrid container. So that's matching. Any questions here? Cool. Okay, so how do updaters work? Again, this is fairly easy to conceptualize and nothing too deep here. We basically have some business logic. It knows where security databases are. Usually net addresses, HTTP, FTP, whatever it might be. And just goes out on an interval, tries to find new vulnerability databases, new updates to them. And then if it does find them, it just downloads them, parses them, puts them in the database in our format that we can easily search against. And now there's notifications. So notifications make clients aware of changes to vulnerable manifests. So let's dig into how the Notifier service actually works. So Notifier discovers an update by pulling the matcher, right? So the matcher, if to reiterate the matcher is running these updaters and they're constantly pulling new security databases and they log or they create a database entry and when they find new content, when they've downloaded a new security database. So the Notifier is sitting there and it's asking the matcher saying, hey, do you have any new content? Did you just download any new content? In this case, it has, right? It has found a new update. So now it says, okay, yes. Okay, so this is an update of security information, not an update of container images. This is an update of security information, yes. So the Notifier is sitting there watching the matcher and the matcher just grabbed some new security database. Let's say it's like a new pull manifest came online. It downloaded something for Ansible. So the Notifier says, okay, I just saw this. I want to create a notification now, right? I want to tell the client that, hey, if your containers had an Ansible version, XYZ, let me know who has that and I'm gonna inform you guys. I wanna tell the downstream owners of those manifest and those containers to go patch your container. So the Notifier now asks the matcher again. He says, let me get the diff, right? So he asks the matcher, he says, we diff the old database with the new database, right? And we're able to find out what was added and what was removed. So this new database that just came in, it might have removed a couple of things too, right? And we should be aware of that. We shouldn't just be add.  With that diff in hand, it goes off to the indexer and it says, okay, who's actually affected by this? The indexer is responsible for what? Quiz time, anyone know? Okay, I'll just tell you. Yeah, so the indexer is responsible for understanding the contents of the container, right? So it has a nice big index table that says, these packages exist with these manifests, right? So when the Notifier asks the indexer, hey, we have these new vulnerabilities. Vulnerability123 is affecting package X, right? The nthexer can look up saying and can say, okay, these manifests, these containers with package X, are vulnerable, right? So they give back those manifests to the Notifier. So now Notifier has a nice big list of all the containers which are affected by this new update that has entered the system. And then finally it creates a notification to any subscribed clients, right? It says, it just gives notification that says, these manifests, a new security update has came into the system and now these manifests are affected by them. You should probably go patch them, you know? Cool, any questions from here? Yeah, so when one is removed from this CVE list, if you're on a later newer package, you're not gonna get notified that it's an issue. But if you're on an earlier package before it was removed, you are gonna get notified. That's correct, yeah. Okay. Yep, cool. My other question actually is more in terms of implementation, right? Because obviously in a large development team, managing these notifications is gonna become its own thing. What notification ops frameworks have people plugged Claire into? Yeah, yeah. In order to handle this. That was definitely a good question because we do have a couple of different use cases now. So when we built this notification system at first, we only really supported web hooks and pagination. But then when we started integrating with EXD cloud, which powers the Red Hat Container Catalog, they influenced us to actually support AMPQ and Stomp, which are message brokers. So that becomes a little bit more of a scalable way. If you did have like a lot of notifications coming through the system, we'll actually deliver them to like a rabbit and queue or an active MQ. And then you can build a set of workers off that to scale the amount of notifications that you guys are handling. It's a good question. It's a good question because on big teams, I mean, it can get kind of crazy, especially really big repositories or registries rather. You kind of want more than just, you know, a single node paginating results back. So yeah, supporting message queues gives you that functionality, right? You can just have a cluster of workers that are listening off that queue and just eating up notifications and doing whatever you want from that point on. Yeah, I was actually thinking more in the realm of sort of ops tools, like, you know, pager duty, something like that. Because the notification eventually has to go to a person who has to know to tell the relevant dev team or a person on the relevant dev team that they know that they actually have to rebuild their images and run the tests again. Yep. Yeah, so I haven't, I don't know too much about actual, like, you know, DevOps tooling around those notifications. Quay itself has this functionality, right? Because we wrote these notifications kind of like for Quay's consumption. But outside upstream, we don't have anything off the bat. It is a cool thing to think about and to maybe bring up, you know, in my community development meetings about whether we should be providing some type of integration layer, you know, that just kind of feeds off our notifications and pushes them to popular alerting systems like pager duty. It sounds like a good idea. It's definitely something that's worth considering. So, but yeah, as far as today, we don't really have any kind of integrations into alerting or monitoring systems right now. We would expect the users of Quay to kind of build that out. Well, obviously, you've, go ahead, Amy. Okay, from an ops side, personally, if I'm gonna get these notifications, have it run overnight or something and then just send me the information in the morning versus a pager duty that's gonna go, oh no, you have a vulnerability every five minutes. So I think that would also be a lot of the different operators' taste and how often they wanna be notified. Yeah, pager duty is actually not a good example. I was actually trying to think of one of the other sort of ops management frameworks that aggregates notifications, right? Because obviously, you know, particularly like if there's a CVE in a major package, like there's a CVE in, say, Golang, then you're gonna get a million notifications about it because everywhere you use Golang in your enterprise, you're going to get a flag. And so you wanna be using some tool that's gonna get aggregated in those notifications so that you know, you know, so that you're not getting a million separate ones.  I was just blanking on a name for one. Gotcha, gotcha, I see what you're saying. Yeah, but if you're providing the data to come brokers like, you know, AMQ, then presumably most of those brokers have the ability to consume information off of those Qs. Presumably, yes, yes. And then, you know, we do kind of punt roll up logic like you're talking about to those Q consumers. But yeah, I mean, there are good points. The roll up is an interesting point because yeah, we still need to demonstrate that each individual manifest, each individual container was affected by this.  So the aggregation thing is cool. It's definitely something to think about further. There is a question over on YouTube. Can we send clear security notifications to an SIEM tool of some sort? Uh, what is that acronym? So this would be like these scene tools, SIEM. They're like aggregating security management tools into one kind of single pane of glass. If you, depends on the level of customization you have there. So we, we provide a webhook mechanism. So we'll fire a webhook and we show you, we document that actual structure of that webhook. So if the tools have a webhook integration feature and they can call back, then they can pool in data from that webhook. The, you'd have to understand the clear schema and exactly what those notifications look like to make use of it. So there's no integration as far as I know into those systems as of today. I mean, I do have to say as a, as a former ops, I would want a tool like clear to be supplying raw data rather than trying to do aggregation or something else itself, because usually things like a SIEM tool is already going to have a fairly sophisticated rules and aggregation engine. And, and I don't want to have clear trying to replace any of that. Because the clear team is simply not going to put as much work into rules and aggregation as a rules and aggregation tool. That's a good point. Yeah, so. It is a good point. Yeah, those policies usually come from internal needs. So there is some cross-cutting concerns there that do kind of bubble up. Cool. Anything else? No. All right. Well, actually wait, you know, can you do something like create a JIRA ticket with a web hook or something like that? No, no, we don't integrate directly with JIRA. Okay, cool. Yeah, again. This is a scanning tool. This isn't your all security encompassing tool. Yeah, so the integration points are really meant for extensibility, assuming that, you know, even small scripts are written against it, you can do whatever you like, you know. So if you can even write, you know, Python scripts that can respond to web hooks, then you're free to do anything you like with those notifications. So creating a JIRA ticket would just be creating some small glue scripts or some small glue code that sits in between Claire and your ticketing system. And that's also part of being open source. You can contribute these scripts back to the project and to the community. Absolutely. Yeah. And I was gonna say the, I just had a truly horrific thought, which is be clear to IFTTT broker. Oh, Lord. Someone will do it. Eventually. It's only a matter of time. Yeah. Cool. So that's cool. So that's notifications so far. So now let's go over, you know, moving from Claire V to Claire V4. As I touched upon a little bit, Claire V4 is just a complete rewrite. So to get from Claire V2 to Claire V4, you have to backfill your containers, which shouldn't be as bad as it sounds, most likely because a lot of your repositories or your containers have shared layers, as we discussed before, Claire differs a lot of work. So that rescan isn't as scary as it sounds, but it does need to occur. And just to reiterate the point, anyone using Claire V2 currently, the layer-based API is gonna go away. And I think most people are probably clapping their hands at that now if they are Claire V2 users that didn't directly use it with Quay, but will be using the manifest driven API from this point on. Also, we're kind of bringing up to community discussion pretty soon, whether we should just go full OCI. I don't think anything really stops Claire from utilizing the OCI manifest specification. And we basically kind of just wanna get a community opinion about that, whether we do find it actually easier to build tools against Claire if we do standardize on OCI. But as far as an implementation, it's pretty fairly easy for us to get there. So that's something I'm kind of excited about community conversation, bubbling up around that one. Cool. So a little bit of information about Quay and Claire. So Claire V4 was introduced in Quay 33, and it's now the default container scanning security tool moving forward. And Claire V2 is now deprecated in 34. So 34 is now out the door. So Claire V4 is what Quay will be using moving forward and Quay IO will follow suit. We're not quite at the end of March that got pushed back just a bit, some internal details that I won't dig into too much. So Quay IO will be running Claire V4. We just need to basically procure assets to do the DevOps and infrastructure work necessary to get it kind of forklift into Quay IO. And then this is a cool, the cool part. I think it's really cool is that we work directly with the EXD cloud. When I started at Red Hat, taking a look at Claire was mostly focused on Quay. And one of the first things I really want to do was get further integrated into other use cases. So we started having collaboration meetings with EXD cloud. So EXD cloud runs the Red Hat Container Catalog. So if you were to go to Red Hat Container Catalog and get any of the security ratings and gratings right now that's all powered by Claire V4 head, they're running latest and greatest, they're fearless. So they, but it's been working pretty well. And they've been using it at scale with about, I think it was 500,000 container images indexed at this time. So if you do have time, just check that out. It's the Red Hat Container Catalog is great.  And then this is just roadmap. So Claire for one, what do we even expect when we have coming down the line? We definitely want to expand on language support. So Maven is coming in as a internal Red Hat contribution. This is coming from Code Ready Containers. So the Java support will be there. Golang, we're exploring right now. Definitely want some JavaScript experts to come on and really get language support into Claire in that fashion. My coworker Hank is currently working on a Kubernetes operator. That will be open developed as well. And this should make it pretty trivial to deploy Claire in the various architectures that we support. Like I said, because Claire is broken up into microservices, you can actually deploy it in many different ways in pretty flexible manner. So depending on if you do want a truly distributed deployment, you can run Claire with each service, the index or maturing notifier talking to their own databases, or you can run what we call canonically as combo mode. And that just runs all the services on a single node. And then you can scale out that node. So depending on how advanced your infrastructure team is or how acquainted with Claire you are, there's a couple of options in how you actually can go about running it. And the performance profile of your infrastructure is what's really going to determine how you deploy Claire. Then we're gonna spend some time doing performance and scale analysis, have some time booked just to do low testing, find any kind of bottlenecks that we might be having and squash those ASAP, it's a big initiative right now. And then reliability efforts. This is everything as far as using the least amount of database connections as possible, optimizing any distributed blocks so that they don't take too long to acquire or unlock. And then just general profiling of Claire. So that's gonna be our big efforts within the next four or one periods to basically some performance doing a lot of mechanic work. Cool, and then. One quick question we've got asked, how frequently do you update Claire security information database? Yeah, so that's configurable by the config, but by default and what we recommend is every half hour. So if you don't place a configuration at all, every half hour, we're gonna go and look at all the data sources and find out if there's anything new. And if there is, we're gonna pull it in. Half hour is just a nice number. It keeps everything, there's not a ton of load created from constantly going out and trying, but you can change that interval up to a minute, I believe. I think we limit you just for safety reasons. Cool, so then that's the roadmap. And then finally, I'm just gonna end with some contribution information. So we're beginning official community development meetings March 9th, March 9th, yep. So right around the corner, the first meeting will be about just the introduction, not too dissimilar to what we do today. And then some of the work that we have coming down to pipeline as far as what we're calling enrichment. So enrichment is basically going out to metadata sources such as NVD and allowing you to get further information on vulnerabilities. So that's initiative that's underway right now. So that'll work its way into that first community development meeting. And then the second one will be pinging out to anyone that's interested to actually add their own agenda items onto that meeting. We'll always have something just because Claire is still, Claire before is still pretty young. There's just, will be a ton of development coming down the line. So there'll always be something there, but if you don't have anything on the agenda to contribute for the foreseeable future. So then there's a Claire mailing list. This is a great place to join if you are interested in just following development or getting involved with our community development meetings. We'll probably do a post there, probably a couple of days before each meeting and we'll ask for agenda items to be added to the public Google doc. And then just here's some contact. So if you need to contact me, that's my email address, Luz De Los Santos. It's Lvallosa at redhat.com. Hank is my coworker. He is also a principal engineer on Claire. Aless is the engineer who really backs the EXD cloud work. He did the integration into RHEL's pull manifest and the RHEL support and the Red Hat Container Catalog. So he's a good person to have a contact to. And then there's just a general email for the Quay team. So if you just need to talk about Quay things or just get, hey, I don't know who you've talked to, that's a good place to just throw an email to. Cool, so open for questions. Yeah, let's stop sharing, I guess. Sure, by the way, Luis, your camera froze at some point in time Oh, did it really? Is it still frozen now? It is very black now. Oh no, okay. I would just stop and start your camera share and zoom and that might fix it. Once the white balance kicks in, hopefully. It's coming. Oh, there we go. Okay, there we go. There we go, perfect, okay. So, let's see, I don't know if we have anything from the stream. I have some questions, both technical and non-technical. My first question is, the obvious one, which is what happened to Claire 3? So, that's a great question. I mean, why is there no three, right? So when I came to Red Hat, I came directly to work on Claire. And at the time, Claire B3 was a project that went through a lot of individuals, kind of lost steam. And there wasn't a lot of active development on it. So, luckily, I was able to work with my manager and I said, okay, let's take a new look at this, right? Let's look at what's been done. Let's find any flaws because Claire B3 wasn't conceptually too different from Claire B2, it's mostly just feature ad. But there were some issues with Claire B2 just implicit to its design. So I worked with my manager when I got to Red Hat to approach it in more of a design analysis instead of heads down, okay, like just start fixing it, which I appreciated quite a bit because it's one of my favorite things to do as an engineer. So I got to sit down and really pinpoint, where does this thing work? Where does it not work? And we got the okay to go ahead with more of a green field project. So that's where Claire Core came in. So now Claire Core is a repository under the Quay organization, which is the new engine for container scanning. So Claire Core is an interesting project because it's agnostic to Claire, right? So technically, if you wanted to write your own container scanning application, you can use Claire Core as a base engine to do those things, right? So you can use our matching technology, you can use our indexing technology and you can build your own apparatus around it, all internal API. So with that base layer built, we then took a relook at Claire and then we just kind of jumped over Claire V3 as a marketing decision and then called it Claire V4 backed by Claire Core. So that's kind of the history lesson. But as far as, you know, it was mostly just when I got here there wasn't a lot of people working on it and we really wanted to rejuvenate the ecosystem in the community. So a green field approach was, I think beneficial more than anything. I guess so my next question and interrupt me Amy, if you have something, I would have to do, I've got a couple of questions that have to do with CI CD integration, would you look, you know, number one, whether or not there's any, you know, because now that you have the CLI, right? It's possible to integrate it into a CI CD framework, even if you don't use Quay. So my question is, has anybody done that? So has anyone done that? I am not exact. So AWS is currently integrating with Claire V4. I'm not actually sure whether they're putting that into their CI CD pipeline internally or if that's actually powering, what is it, ACR, Amazon's Container Registry? Yeah, ECR, I think you're right. I think it's ECR, yeah. I'm not sure if they're just powering their registry. So historically, Claire has been a registry focused tool and it's been designed for high volume registries, right? Because Quay.io is a large beast, right? It's a big application and it has a lot of volume. So we've always worked with Claire as in the service context, right? It's got to be fast service, got to scale, got to be made of a couple of nodes that can, you know, asymmetry the scale in, you know, elastically, so there hasn't been a huge emphasis on CI CD from internal. External, I would imagine that there has to be at least a couple of people who are piping Claire into their CI CD pipeline. I don't know of them firsthand, but I do imagine that they're going to start springing up. And I also, me personally, from a design aspect, it's one of the things I see as the next big step for Claire. Other than just pumping in language support, one of the big initiatives I want to undertake is making this CI CD integrable, right? Putting this directly in your pipeline. The way we go about that is the interesting part because, you know, we do have security databases. They're large. You really don't want to run those pools in an ad hoc manner during pipeline creation and pull down. So there has to be this some discussion about, you know, do we host the databases online now? Historically, Claire isn't a SaaS, right? Claire is a software project. So if we go into CI CD, we need to start discussing internally, does Claire become a SaaS, right? Does Claire start hosting security databases? How big are those databases? Like, say file size. There can be pretty big 30 to 60 gigs, yeah? Okay, so not something you want to be running on your laptop for pre-tests.  It's not, there's no way around that. We pull, I can't remember the number off the top of my head, but it is in the 200 million vulnerabilities. So you could have a centralized database. Exactly.  Exactly. So that would give you the extra security before you even start testing anything. Yep, yep, and that's kind of the things we've been throwing back and forth. We're also playing around with ideas of making the indexer completely localized, which is a much more achievable situation because the indexer database, on the other hand, can stay pretty small, right? It's pretty condensed. It's just numbers and strings for the most part. So now that's another option, right?  So that's another way of going about it. Finding that bright fit, I think it's just gonna take a little bit of talking as a community and understanding what use cases we're really after and what makes sense, right? Because we can internally as a team, we can come up with something, but we would like to actually do this with all the players involved. And you said the community is meeting next week, March 9th. March 9th, yeah. Do you have any information or should everyone join the mailing list and it'll be sent out there? So you can grab all the information right now just on our GitHub. So if you go to github.com quay Claire and then go to discussions, in, we've been using discussions for a lot. We've been using discussions for Q and A. So if you have support issues and we've been using discussions in GitHub for open design, you'll see, we just recently did the Prometheus metrics. So you can just read exactly how we're going to implement Prometheus metrics and we'll be doing the enrichment specifications there too. So open designs are there too, but there's also a discussion topic for community development meetings, which has the calendar, it has the dates and the times. So that's probably where I would go to grab them. I would also join the mailing list though because it's more of a, you know, a pingsy, right? It's like, hey, we're gonna do agenda enrollment now.  So it's a little bit nice to be on both. GitHub, as far as I know, maybe GitHub notifies you if you subscribe to discussions, but it's not the same as Google groups, which just kind of shoves that email in your face, doesn't ask you. Yeah. Do we have time for one more question from the audience here? Yeah? Yeah. Okay, there's no clear documentation on trigger only on branches and tags matching a regular expression for Quay Get Trigger Builds. I think my first question is, does that have anything to do with Claire? And if so, is that something you can answer? That is not something I can answer because that is a very Quay related question and I don't know that, I'm sorry. I dropped a couple of links in there to help out. Yeah. Narendra, let me know if you need any help. You know how to reach out to me. Okay, are we at time? We got five minutes. Five minutes, okay. So one of the other things I'm gonna do because partly because it lets me plug something going on next week is part of, you know, with Claire and everything we're having, we've revived a discussion we were having in the industry over a year ago before everybody kind of forgot about it for a while, which is what we call secure supply chain. Thanks to the good folks at SolarWinds. And obviously, Claire can be a chunk of secure supply chain in a container application stack. What other pieces would you need that Claire doesn't do? Yeah, yeah. So it's a really cool subject, you know, despite the negativity that revolves around it, it's something that the industry definitely has to do. But you know, to really, as far as I understand, to really get a good supply chain mitigation strategy, you need image providence, right? You need to understand what's in an image, where it was built, where it has transferred, you know, you need these kinds of change of integrity. And that's something that, you know, could happen from the registry layer up because when you're pushing containers there, you are able to understand the build system, especially if you're doing builds at Quay itself. If Quay grew some kind of verification system, you know, maybe notary, something similar to a Docker content trust, then you start to start filling out that chain, right? The only problem with like, notary is only good for that last step, right? It's only good to say, okay, this container was definitely created by this user, right? I know there's some projects too, which give you like granularity into those policies, like IBM has one, I forget the exact name, but you're able to say like, I will only pool containers from the author, Tom, who pushed it with this key. It's based on the tough spec, but that's not enough for supply chain mitigation, right? It's that image province, which I don't think there's a full solution to today, right? But it really needs to happen that, one, you have to get to a point where you're having reproducible builds, right? That's so easy to mistreat, right? As soon as you put, you know, from Ubuntu, even from Debian, you know, like stable, that's a moving target. You're not gonna get reproducible builds, you can't hash the containers content and get the consistent, similar container. So step one, I think that, you know, some tooling around creating consistent build environments, which don't allow you to kind of get these, these drifting dependencies that come into what looks like the same container build. From there, that has to be verified. And then the CI CD system that actually created it has to be identified and verifiable. So I think there is one project that I know that's really trying to do this end to end. I think it's called in Toto, in Toto. If you check that out, it's a framework. I've been trying to see, you know, whether we can leverage that, but they seem to be the only solution that I know of today. I believe it's actually from the tough individuals, the update framework. I believe the same individuals are now doing in Tutu, which is really targeting that end to end. I'm going to create, you know, tough keys, which verify the CI CD system that verifies the literally the git convict this code came from, chain them all together and then provide this as like an artifact. So yes, Claire can do a portion of that, right? Claire can tell you, okay, what's in this container? And then coupled with Quay with some notary magic, we can say, okay, we trust what's inside this container, but there's still missing aspects there, right? You really need that end to end to get supply chain mitigation, which is also why it's, you know, it's a hard problem. It's a really tough problem. It's also, again, it's there, I think that's going to be the next big explosion of like security tools that we're going to see is this, especially with the SolarWinds debacle, you know, like we're definitely going to see like end to end encryption mechanisms and verifiability for the entire build and contents of the container, which is something that we need to get there, right? Yeah, I mean, totally. Okay, go ahead. Because we're running out of time, we have one question off of YouTube. Are there any plans to integrate Claire and StackRocks and will they complement each other? Fantastic question. So I'm allowed to talk a little bit more about it now that they're actually bedged in and completely merged into Red Hat. So StackRocks uses Claire V2, which is great because their underpinning technology is already the same. Moving forward, there's no official talks, but I cannot see a world where we're not collaborating on Claire V4 together and migrating into a single solution, which does, yes, complement each other, most likely does not conflict with each other. So it's nice about, you know, why I love my team and the position that I'm in is because we work more on Claire as a upstream project and there isn't room for a lot of competition there when other products like this, especially if they leverage Claire come into the equation, we're working together to either, you know, work with their Claire V2 foundation and then to definitely get them trying out and integrating Claire V4 into their platform too. So I'm actually pretty excited about that. One, because it looks like we have a group of people who know Claire very well just plopped into our laps, which is amazing, right? That's like super helpful for everyone involved. Yeah, exactly. So I'm pretty excited to work with all of them and I'm excited about, you know, what comes from this integration and also excited about just the stance that Red Hat has been taking on security in general. And, you know, it shows that that acquisition kind of shows like, okay, we need to make a commitment to this. Okay, so coming up, one is if people were interested in that discussion about secure supply chain, we're going to have an hour long discussion about that at next week's container plumbing days. We dropped a link in the chat to register for that event. So that'll be on the 10th, so you can go to the Claire community meeting on the 9th and then go discuss container security on the 10th. And then for the next Cloud Tech Thursday, Amy, you've lined something up. Amy, yeah, go ahead. I was muted, I had to find the button. Yeah, so in two weeks, we're hoping to have service telemetry framework, which is a monitoring system that runs on Kubernetes and monitors OpenStack. Specifically, it's been installed on OKD and OpenShift and then monitors over to OpenStack using Prometheus. So I've included a link to their documentation. So unless something changes, that's what we'll be discussing in two weeks. So thank you so much, Lewis.  And thank you to my co-hosts, Amy and Chris. And really cool, sort of in-depth look at Claire and everything. And thank you, everyone, for attending and for your questions. Thanks, everyone. Thank you for your questions.


What is going on guys welcome back to the channel and I appreciate you being here today I am back with some more and from news for all those interested But before we start people up before we get into the video I have created an out from Facebook page Which I will showcase all the latest info I find within it as well as me being active on it to those who have any Questions for me that Facebook page named and from news hub can be found linked within the video description If you do you want to check it out and drop it a little like okay So we're going to start with a bit of news which relates to gameplay and it's to do with the DDA Now if you don't know what this is, I will explain EDA stands for dynamic difficulty adjustment Now I'll read what it states on wiki before I give you guys my opinion on such things Dynamic game difficulty balancing also known as dynamic difficulty adjustment or dynamic game balancing is the process of Automatically changing parameters scenarios and behaviors in a video game in real time Based on the player's ability in order to avoid making a player bored if the game is say too easy or frustrated If the game is too hard, however, then I players break the rules in which players are bound can cause the AI to cheat For example AI players might be given unlimited speed in racing games to stay near the human player The goal of dynamic difficulty balancing is to keep the user interested from the beginning to the end Providing a good level of challenge So that's what this means according to wiki, but is such thing a good thing in my opinion I don't think it is when it comes to anthem. Here's why anthem like destiny will obviously have set challenges Said set challenges will require you to be a certain level level being a key point here It's something to chase. It's something to show off It's something that makes more powerful than people not on our level if such a system is in place What is the point of a level if a newbie can come into the game take part in the same activity you can But your 30 levels higher yet He does the same amount of damage to said enemies and bosses in the activity you're in that to me Although can be great in certain instances of certain games. I don't think we'd work in anthem I actually believe anthem will be a game which you progress through things will open up according to your level now when it comes to DDA and actual talk around anthem over the past week is the point of EA also being a part of anthem along with bio where now as We know EA in the past and their DDA systems they have implemented into past games are a bit of a dodgy one What deters people off when EA and DDA are mentioned in the same sentence is as follows EA have used such a mechanic which they have implemented into past games Which supposedly heavily increase the odds in players purchasing pay-to-win items to basically keep up with players They're playing with or against kind of sketchy. Yes. I agree now a post on red It was put out on this and already through it seems to me like I hope that anthem won't Psychologically bend us all the girls more dim by the minute Patent to allow them to adjust difficulty on the flight in PvE and PvP and or pay-offs of players We have no business being paired with as it is discussed in Jim's latest video I urge you all do not pre-order for a shiny new suit Tell your friends not to either and goes on to say basically don't buy anything But by a way will quick to counter such claims Brandon Holmes by a way as creative director stated in reply. I'm not sure where this is really coming from We're not doing any of that though So this is kind of great news if by a way are stating such a pattern will not be included in a game Which increases the odds of making basically you want to purchase items to keep up with other players This is a good thing. It's good to see also by where taking the lead here So such a mechanic such a system will not be a part of anthem according to Brendan Holmes So we're going to move on but Brendan Holmes will stick with us as he's actually really active on Reddit Responding to fans on questions about the game. So what else can we learn from this dude? Well, a post was made talking about anthem if it would be open world So the post was titled will this game be open world? We had one initial reply stating we won't know until we get more information However, I am hoping it's more like the revision then destiny Holmes replied with this It's a bit of a mix destiny has some very cool server technology that allows them to host my great seamlessly This means that they can partition up spaces to be fairly small which helps avoid taxing servers This is obviously speculation on his behalf. We're taking a different approach We have different tech so our areas are fair bit larger But there will likely be some loads between some of the areas We're still figuring out the exact details on a lot of this stuff someone else commented with this I recall the quote from the investor call anthem our new IP service from by the way We'll introduce a contagious open world that is ever-changing. So as to not going to spoilers I think I'm right at devs in the past have used several tricks to stitch adjoining zones together Having a load without it looking like a load tight corridors gaps in rocks tunnels Dragon Age inquisition even with an open world zone would sometimes have load screens I guess this is all about judging all those priorities.  It kind of shapes up the open world We will experience with anthem another thing to talk about which is a curious subject too many and that's gameplay fuel Sure, it looked great within a demo. We saw a three, but how will it play? So we saw this question asked on Reddit How will movement combat controls feel within the game possibly give a comparison to what's out already mass effect Division gears as someone that loves the third person view I think how the controls feel will really determine playability from my experience with a mass effect games It's always felt clunky where as compared to the division movement and combat just feels smooth Homes replied with a lead gameplay designer Chris King has a lot of experience with combat design and feel I think we're in good hands. So Chris King. Let's check out. What else this guy's been involved in Starting from the bottom making our way to the top Central and the Punisher tools and web programmer red faction gorilla gameplay programmer Central to systems and gameplay designer red faction Armageddon systems designer central to third lead combat designer Halo 4 lead sandbox gameplay system designer halo 5 lead sandbox gameplay system designer Mass Effect the gameplay designer and anthem lead gameplay designer So he does have some decent games under his belt But I do agree with the initial question here to me mass effect did feel a little clunky But I'm pretty sure this will work out and this game will feel super smooth I actually love central games and I feel they play quite well They are from far perfect in terms of mechanics of gameplay But they were decent enough and I enjoyed them for sure until we actually get our hands on we ain't actually gonna Know how it feels are we mean we can see all the videos in the world But until we play it ourselves, we ain't gonna know okay So we're gonna move on and on to API homes was asked I don't have the actual quote saved anywhere, so I can't link you it But I believe that by the way have said that they are very interested Working on having an open API of that system style by use by third-party applications As for my personal opinion on the matter destiny's open API was one of the features I loved about the game being able to access all that stuff from my phone or tablet was basically epic homes replied with Yes, we're really interested in that idea personally I've played around with a lot of rights API and I've also been really impressed by what the community has done with destiny's API I'd love to see what you folks could do if we had one as well So this could be something we do see in the future for sure All this new info is kind of giving us a general idea of how this game will perform and so far I'm more loving every moment of it. It's far from being in its final stages and Info still on the game is your other scarce I will however have you guys covered on any update that comes and from wise covered right here on my channel So if you are new around here and anthem is the game you want to see be sure to subscribe It's but yes guys that is it for another anthem news of video Don't forget join my Facebook page if you want to be up to date with the latest news too Thanks for stopping by as always and I will catch you on that next one