Improving Global Software Supply Chain Security with Alpha-Omega
Explore the Alpha-Omega Project's framework for enhancing software supply chain security, focusing on critical and long-tail open source projects. Gain insights into this new OpenSSF initiative.
How to Serve Open Source Maintainers Without Annoying Them
Discover best practices for reporting bugs to open source maintainers, including coordinated disclosure and effective communication, to improve acceptance rates and reduce friction.
Root Canal Static Analysis Audit of Zephyr
Comprehensive static analysis audit of Zephyr's code quality, revealing deeper security vulnerabilities beyond standard linters. Insights on advanced bug detection and fixing processes for critical open-source projects.
We Make Python Safer Than Ever
Explore efforts to enhance Python's security, including PyPI audits, improved practices, and community involvement. Learn about challenges, progress, and future plans for a safer ecosystem.
Making Python Safer Than Ever
Explore Python ecosystem security improvements, best practices for library maintainers and users, and PSF's efforts to enhance safety in the open-source supply chain.
Proactively Auditing Open Source Dependencies for Security - Here Is a Clean Section of the Beach
Explore proactive auditing of open source dependencies, scaling challenges, and data handling in the Alpha-Omega project. Learn about efforts to enhance software security through systematic scanning and repair.
Making Python Safer Than Ever
Explore Python ecosystem security efforts, best practices for library maintainers and users, and PSF's initiatives to enhance safety in the open-source supply chain.