Chainguard is conducting interviews of software professionals at organizations that build and/or deploy containers and regularly engage in CVE triage as part of their job. The interviews, which are anonymous by default, are meant (1) to better inform Chainguard staff on the time costs associated with CVE triage, (2) to provide comprehensive information on how software professionals view the task of CVE triage and how modern organizations approach this task, and (3) potentially to provide input into a broader academic study of CVE triage.
All participants will be compensated $200 for a 90 minute interview. Interviewees can choose to donate the funds directly to an open source project, maintainer, or foundation of their choice.
Questions should be directed to John Speed Meyers at jsmeyers@chainguard.dev. Filling out this form does not guarantee that you will be selected for an interview.