Podcast appearances and mentions of dave welch

Today we are talking about Security, Vulnerabilities, and how to avoid exposure with guest Dave Welch. We'll also cover Security Scanner as our module of the week. For show notes visit: https://www.talkingDrupal.com/567 Topics What Are CVEs CVE Lifecycle and Disclosure AI Era Security Challenges What CVE Program Excludes Patch Fast Reality Global Security Signals CVE Timing Judgment KEV Flags Explained CVE Updates Link Rot Who Decides CVE Sneaky Patch Dangers ADP Program Fixes Small Team Triage Vulnerability Tsunami AI Autonomous Security Future Legal Pressure Budgets Resources Psalm PHP Static Analysis Tool SARIF format PHP ecosystem Council of roots How AI Broke Open Source Security: End-of-Life Software Is the Most Exposed CVE podcast Vulncon PSIRT Guests David Welch - github: dwelch2344 dwelch2344 Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi JD Flynn - dorficus MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted a fast way to catch the security mistakes that slip into custom Drupal code — especially the code your AI assistant just wrote — before it ships? There's a module for that. Module name/project name: Security Scanner Brief history How old: created in July 2026 by Mayank Gupta (mayankguptadotcom) of Acquia Versions available: 1.0.0, which works with Drupal 10.3 and 11 Maintainership Actively maintained — created and shipped its first stable this summer, with steady development right through late July Security coverage Test coverage — and it's strong: unit and kernel tests, including a regression corpus built from real Drupal core advisories Documentation? In-depth README with a full check table and CI recipes, plus a CHANGELOG Number of open issues: 1 issue, not a bug Usage stats: 2 sites (it's brand new) Module features and usage Provide a Drush command, has no UI — you point drush security:scan at a module or any path, it reads the code statically, and prints a prioritized, OWASP-mapped list of things to review It's built for the age of AI-written code — the checks target the classes AI assistants keep reintroducing: routes with no access check, #markup and |raw XSS, missing CSRF tokens, unserialize() on untrusted data, hardcoded secrets Then there's an optional deep pass: with the Psalm static analysis scanning engine installed, it'll trace untrusted input across functions and files to catch cross-function issues. And it's honest about state — the report always says whether that deep pass ran, was skipped, or failed, so a failure never gets mistaken for a clean scan One nice detail under the hood: a tokenizer-backed "code map" that knows whether a match is real code, a comment, or a string — so it won't flag the word "unserialize" sitting in a doc comment. That kills the single biggest source of false positives The checks are regression-tested against real Drupal advisories (Drupalgeddon, Drupalgeddon2, the 2019 unserialize bug, etc) so a pattern that caused an actual CVE can't quietly come back in your custom code Output comes in three flavors: a readable table, JSON for CI and AI agents, and SARIF — which means findings show up as annotations right on your GitHub or GitLab merge-request diff instead of buried in a job log For adopting it on an existing codebase there's a baseline file — you fingerprint the findings you've reviewed, with a required reason on each, and they stop failing the build but never go invisible; every run still counts them It exits non-zero on error-level findings, so it drops straight into CI or a pre-commit hook And it's extensible — checks are Drupal plugins with a #[SecurityCheck] attribute, so any module can add its own or alter the ones that ship Big caveat, and the module says this itself: a finding means "review this," not "this is broken." Static analysis has false positives, and a clean scan doesn't prove the code is secure — access-control logic especially still needs human review I first heard about this module over beverages at Drupalcamp Asheville, so I know that this module was largely vibe-coded, after having an AI agent ingest every single Drupal security team CVE. So I like to think of this module as security pattern recognition tool, but of course it does even more

We sit down with host and creator of the 'Tales of a Messed up Northern Boy' podcast David Welch and long time friend and fan of the BCP podcast. We talk about all the things, this really is a brocast so its not for everyone but we still hope you enjoy it. https://open.spotify.com/show/3wvOtsLg9PZfYANKB16uCN?si=f01684d87f40409a  

This episode is part of our series, "Campaigning for Christians", covering the ins and outs of political campaigns, and how Christians can get involved. In this episode, we're featuring our 'Politics 101' panel discussion from our 2023 Wake Up! Conference. Panelists include, Aamon Ross, Creator of Kingdom in Politics, our Christians Engaged Campaign School, Terri Hasdorff, author of 'Running into the Fire: How Christians Need to Be Involved in Politics', and Dave Welch, founder of U.S. Pastor Council. Purchase Terri's book: https://christiansengaged.org/merch/p/running-into-the-fire-by-terri-hasdorff Support Christians Engaged's efforts to educate and empower Christians nationwide: https://christiansengaged.org/donate⁠⁠ Conversations with Christians Engaged | Hosted by Bunni Pounds Listen, watch, and subscribe: https://christiansengaged.org/conversations-show Christians Engaged exists to awaken, educate, and empower believers in Jesus Christ to: ▪️ PRAY for our nation and elected officials regularly ▪️ VOTE in every local, state, and national election to impact our culture ▪️ ENGAGE our hearts in civic education or involvement for the well-being of our local communities and our nation Learn more: ⁠⁠https://christiansengaged.org/⁠⁠ Support our efforts: ⁠⁠https://christiansengaged.org/donate⁠⁠ Take the PLEDGE to PRAY, VOTE, & ENGAGE: ⁠⁠https://christiansengaged.org/pledge⁠

Listen to Future Now #61 I couldn’t believe it when I read about a geoengineering project changing the reflectivity of clouds in our home, the SF Bay Area, in Scientific American, a mainstream science publication! Maybe there is something to all the airplane trails we see these days that will be discussed to major forums. No such luck in looking at the bigger picture of chemtrails, but there is some light on the topic that is now being discussed in the open.  In our fiest hour we also look at Udio, an audio AI program that allows you to create songs on any topic instantly, Tesla Taxi plans, extra stellar sonification, a strange gamma ray burster, and a dead star that has mysteriously come to life!   The second hour is a delightful conversation with Dave Welch, aka ‘Nordic Dave’ at Santa Cruz Voice on his and Amy’s trip to see the total eclipse of the sun last week via his Cessna 182 aircraft. Dave shares with us what it is like to fly private these days, with over 3500 small airports in the US available, many with services, and close to where you want to go.  We ask about the weather, wifi, autopilot, noise, radar, maps, other planes. Dave compares flying private today to taking cross country road trips in the 1960’s and 70’s…very enjoyable!  Later in the show, Dave delves into his passion for incredible audio, building his own amps and speakers for the best sound experiences possible. We greatly enjoyed our time with him, as you will, I’m sure. Enjoy! Nordic Dave and his Cessna 182 and the 2024 Eclipse

Today we are talking about Drupal 7 Long Term Support, common security tips, and support services you can use with guests Greg Knaddison, Aaron Frost, and Dave Welch . We'll also cover Storybook as our module of the week. For show notes visit: www.talkingDrupal.com/439 Topics Drupal 7 EoL Drupal will not stop working Security team perspective Security concerns Extened Community Support Long Term support HeroDevs Never ending support (NES) PHP Hosting Security Contrib Product advisor Colorado Digital Service Resources herodevs.com Colorado Digital Service Guests Greg Knaddison - morrisanimalfoundation.org greggles Aaron Frost - herodevs.com aaronfrost Dave Welch - herodevs.com dwelch2344 Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Ivan Stegic - ten7.com ivanstegic MOTW Correspondent Mark Casias - markie Module name/project name: Storybook Brief description: The storybook module makes it easier to create a connection between Drupal and Storybook. It adds some Twig functionality so you can write Stories in Twig as opposed to YML or JSON or React Brief history How old: Less than a year Versions available: Alpha4 came out earlier this month Maintainership Actively maintained: Yes Number of open issues: 6 Test coverage: no Usage stats: N/A: for development only Maintainer(s): Mateu Aguiló Bosch (e0ipso) from Lullabot. Module features and usage Twig based stories Pulls in Sites theme and base css. So needs some updates to the development.services.yml Also means it is hard to publish a storybook. No need for SDC (but works well with it) Great instructions on the module page Way easier than previous integrations including cl_server. Not as opinionated as previous storybook integrations.

On today's episode of I AM HOME, our hosts Tyler, Becca and Hilary are joined by NFM's Process Improvement Supervisor, Dave Welch. If you've got a junk drawer, too much stuff, or you simply want to organize your life - this episode is for you! The hosts share practical ways to de-clutter your life based on the 5S Lean Thinking and Methods approach that's applied at companies all over the world. Get inspired to start applying the lean method at home and organize your everyday! Resources: Lean thinking and methods

Scott and Bart Zandbergen, CFP and host of the Zandbergen Report Podcast co-hosted this episode and invited Dave Welch, Chief Vision Officer of b.spoke Style, in studio to discuss current menswear fashion trends. With many people either going back to work in an office, while others are working solely from home, and others who are still working remotely entirely, the art of dressing well has shifted. In this episode, the trio discuss the importance of wardrobe consulting, what style trends have emerged, and how to dress to impress here in 2022 and beyond.Connect with Scott on LinkedInConnect with  Bart on LinkedInConnect with Dave on LinkedInFor more on The Optimized Advisor Podcast click here  For more on The Zandbergen Group click hereFor more on b.spoke Style click hereFollow us on LinkedInFollow us on InstagramFollow us on Facebook**This is the Optimized Advisor Podcast, where we focus on optimizing the wellbeing and best practices of insurance and financial professionals. Our objective is to help you optimize your life, optimize your profession, and learn from other optimized advisors. If you have questions or would like to be a featured guest, email us at optimizedadvisor@mailpcwest.com

Host Bart Zandbergen was joined in the studio by Dave Welch, Founder of b.spoke, and Scott Heinila of Producers Choice Network to discuss workplace attire in our changed professional world. With many people either going back to work in an office, while others are working solely from home, and others who are still working remotely entirely, the art of dressing well has shifted. In this episode, the trio discusses the importance of wardrobe consulting, what style trends have emerged, and how to dress to impress here in 2022 and beyond. In this episode learn: - What b.spoke means and its relevance - What items can help elevate an outfit and create a memorable look - What professional attire looks like today and how to incorporate it into your wardrobe - Why how you are seen literally and figuratively starts with how you decide to show up - Why having a signature style is still important today in order to stand out from the crowd To learn more about Dave Welch and b.spoke, please visit www.bspokestyle.com or @bspokestyle *** The Zandbergen Report, where wealth strategies and investment wisdom collide, is led by host Bart Zandbergen. The show is also available on Apple Podcasts, Google Play Store, Podbean and Spotify. Interested in being a guest on The Zandbergen Report? Email podcast@bartzandbergen.com. Learn more about Bart by visiting www.BartZandbergen.com *** NO OFFER OR SOLICITATION: The contents of this podcast episode: (i) do not constitute an offer of securities or a solicitation of an offer to buy securities, and (ii) may not be relied upon in making an investment decision related to any investment offering Axxcess Wealth Management, LLC, an SEC Registered Investment Advisor. Axxcess does not warrant the accuracy or completeness of the information contained herein. Opinions are our current opinions and are subject to change without notice. Prices, quotes, rates are subject to change without notice. Generally, investments are NOT FDIC INSURED, NOT BANK GUARANTEED and MAY LOSE VALUE. Member FINRA.  

Pastor David Welch tackles important political questions like, "How did we get here?" and "Where do we go from here?"

Pastor David Welch tackles important political questions like, "How did we get here?" and "Where do we go from here?"