Making Open Source Secure by Design
Discover essential strategies for enhancing open source security with insights from CISA's Section Chief, covering design principles and implementation across critical infrastructure sectors.
Securing Your Supply Chain by Building with FRSCA
Explore FRSCA, an OpenSSF project implementing CNCF's Secure Software Factory Reference Architecture to protect against supply chain attacks and enhance build pipeline security.
Simplifying Coordinating Vulnerabilities and Disclosures in Open Source Projects
Learn best practices for handling vulnerability disclosures in open source projects. Discover tools and templates to streamline the process and reduce stress when dealing with security reports from researchers.
SLSA in Action: Securing the Software Supply Chain
Live demonstration of securing software supply chain and achieving SLSA compliance using sample repo. OpenSSF SLSA group showcases tooling developed to meet SLSA 1.0 Build Specification, offering practical insights into implementation.
Implementing OpenSSF Best Practices Badges and Scorecards for Project Security
Learn to enhance open-source project security using OpenSSF Best Practices Badges and Scorecards. Gain practical tips for implementation and addressing common issues to improve your project's security posture.
Open Source Software Security Mobilization Plan - Press Briefing
Executives announce Open Source Software Security Mobilization Plan, outlining ten investment streams to enhance open source software resilience and security following a summit with industry and government leaders.
What You Need to Know and Do About Vulnerability Disclosure
Learn about coordinated vulnerability disclosure in open source projects, its importance for security, and implications for maintainers and users.
Summing Up the OpenSSF Summit - May 2022 Gathering and Action Plan
Experts discuss OpenSSF's May 2022 summit, addressing open source security challenges, government involvement, and future initiatives for enhancing software supply chain resilience.
SLSA FRSCA Recipe for Secure Supply Chain
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Security Is an Ecosystem - We Can't Be Secure in Isolation
Explore the evolving security landscape and OpenSSF's role in enhancing organizational security posture with industry expert Omkhar Arasaratnam.
Securing Content Distribution with RSTUF, an Incubating OpenSSF Project
Explore RSTUF, an OpenSSF project for securing content distribution. Learn about its implementation, adoption by PyPI and RubyGens, and use in private repositories and Archivista for in-toto attestation storage.
Web Developer Security: Best Practices and Beyond
Explore latest web security developments, technologies, and best practices for developers, including insights from recent workshops and W3C initiatives.
The Current State of Open Source Security Compliance Tooling Is Well, Sad
Explore practical approaches to improve software supply chain security using OpenSSF projects, open source tools, and open data for automated compliance and robust processes.
Open Source Security: Opportunity or Oxymoron?
Explore open source security challenges, recent initiatives, and best practices for developers and consumers. Gain insights into secure development and supply chain management.
Beyond Guidelines - Designing and Implementing Robust Build Pipelines
Learn to design and implement secure build pipelines beyond standard guidelines. Explore practical tools and methods to enhance supply chain security and protect against rising attacks.
Principles for Package Repository Security
Exploring principles for package repository security, including a four-level maturity model. Learn about CISA and OpenSSF's collaborative efforts to enhance open source software security across ecosystems.
What is the OpenSSF? - An Introduction to the Open Source Security Foundation
Explore the OpenSSF's mission, structure, and initiatives to enhance open source software security with insights from Executive Director Brian Behlendorf.
Finding LibRaska: The Open Source Library that Props up our Infrastructure
Explore challenges in identifying and supporting critical, yet obscure open source packages that underpin infrastructure. Learn strategies to enhance security in open source supply chains.
What is OpenSSF? - Securing Open Source Software Supply Chains
Explore OpenSSF's mission to secure open source supply chains through automated tools, best practices, education, and collaboration.
Improving Global Software Supply Chain Security with Alpha-Omega
Explore the Alpha-Omega Project's framework for enhancing software supply chain security, focusing on critical and long-tail open source projects. Gain insights into this new OpenSSF initiative.
What Makes a Project Critical? Discovering and Evaluating Popular Open Source Software
Discover criteria for evaluating critical open source projects and learn to assess their impact on infrastructure and society.