How to Trust Your Open Source Software Using Scorecards
Explore OSSF Scorecards to assess open source software health, automate risk evaluation, and build dependency policies for informed decision-making in software development.
Structured Scorecard Results: Tailor Your Own Supply-Chain Security Policies
Learn to customize OpenSSF Scorecard for tailored supply-chain security assessments using Structured Results feature. Explore practical examples and use cases for automated policy-driven analysis.
A Beginner's View of Public Instances
Explore OpenSSF's public instances: hosting, scale, security, and usage guidelines. Gain insights into tools for safer software development and protection against attackers.
Intel's Experiences Using OpenSSF Scorecard to Better Secure Software Portfolio
Explore Intel's use of OpenSSF Scorecard to assess and mitigate software risks across their vast portfolio, learning from their experiences and challenges.
Reviewing NuGet Packages Security Using OpenSSF Scorecard
Explore OpenSSF Scorecard for assessing NuGet package security. Learn to evaluate maintenance, workflows, and security tools to improve application safety and make informed decisions.
Insights from the Cloud Native Security Slam
Explore lessons from CNCF's Security Slam, focusing on best practices for securing the software supply chain and addressing remaining gaps in cloud native security.
How Do You Trust Your Open Source Software?
Explore OpenSSF Scorecard, an automated tool assessing software security heuristics. Learn how it evaluates dependencies and identifies areas for improving security posture in open source projects.
Fortify Your Code: Secure Your Supply Chain with Scorecard
Discover how to assess and strengthen open-source software security using Scorecard, gaining practical insights into dependency risk management and implementing robust supply chain protection measures.
Userspace CNI - Developing in the Open While Remaining Secure
Explore the process of reviving and securing an unmaintained Kubernetes networking CNI using OpenSSF scorecard, with insights on implementing CI and improving open-source development practices.
Scorecard at Scale: Old and New Possibilities for Lifting Security on All Repositories
Discover strategies for implementing OpenSSF Scorecard at scale, exploring various tools and methods to assess, monitor, and enhance repository security across large organizations.
Assessing Open Source Software Projects in the Software Supply Chain Security
Discover techniques for evaluating open source software trustworthiness through process assessment, risk analysis, and supply chain practices, with insights from DoD's Unified Platform project.
Reviewing NuGet Packages Security Using OpenSSF Scorecard
Discover how to assess NuGet package security using OpenSSF Scorecard, focusing on maintenance quality, workflow safety, and security tools implementation for better application security.
Blue Team Tips for Using Scorecard in Security Automation
Discover how to leverage OpenSSF Scorecard and Allstar for automated security scanning of repositories, focusing on blue team strategies for securing first-party repos and implementing proactive security measures.