Driving Security at Scale: Principles for Package Repository Security - Lecture
Explore principles for enhancing package repository security, including a four-level maturity model. Learn about CISA's collaboration with OpenSSF to improve open source ecosystem security at scale.
Born of Hard Times - The Clean Dependency Project is Here to Help
Explore the Clean Dependency Project's proactive approach to OSS vulnerability management and learn how to contribute to this innovative open-source initiative.
Sigstore: 2024 and Beyond
Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.
Deep Dive into the OpenSSF Mobilization Plan
Explore the OpenSSF Mobilization Plan for securing open source supply chains through automated tools, best practices, education, and collaboration.
Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain
Explore transparent digital signatures with Sigstore to enhance software supply chain security. Learn key techniques for protecting open source ecosystems.
Developer Security Essentials
Learn essential security practices for developers to protect open source software and strengthen supply chains.
Best Practices Make Perfect! How the OSSF is Improving Secure Development Education
Explore OpenSSF initiatives for improving open source security, including Scorecards, Best Practices badge, documentation, and secure software development training.
How's Your Supply Chain with Your Insecure OSS Ingestion?
Explore secure open source software ingestion and supply chain management strategies for enhanced cybersecurity in modern applications and infrastructure.
OSS-SIRT - Identify Core Services 2
Explore essential core services for open source security incident response teams, enhancing your ability to manage and mitigate security threats effectively.
Every Journey to Securing the Software Supply Chain Starts with a Single Step
Explore NYU's journey in software supply chain security, uncovering challenges, best practices, and a roadmap for enhancing software security.
Build Provenance: Lessons from Homebrew
Explore build provenance for Homebrew package manager, including achievements, challenges, and technical insights. Learn about its architecture and implications for similar ecosystems.
A Beginner's View of Public Instances
Explore OpenSSF's public instances: hosting, scale, security, and usage guidelines. Gain insights into tools for safer software development and protection against attackers.
Presenting the OSTIF Independent Security Audit Impact Report
Explore OSTIF's 2022 security improvements to critical open source projects, funded by OpenSSF. Learn about the initiative's background and key outcomes.
SLSA: A Security Paradigm for Software Supply Chain Integrity
Explore SLSA levels, software supply chain security basics, and tools like Cosign to enhance artifact integrity and benefit your organization.
Proactive Supply Chain Security with GUAC
Explore GUAC, a tool for proactive software supply chain security. Learn about its features, recent release, roadmap, and how to contribute to this OpenSSF project.
New Foundations of SBOM Are Underway at OpenSSF
Explore new OpenSSF projects addressing SBOM challenges, including protobom for data handling, sbomit for trust verification, and bomctl for basic operations. Learn about their impact on the SBOM ecosystem.
Securing the Software Supply Chain: An In-Depth Exploration of SLSA
Explore SLSA's impact on software supply chain security, covering fundamentals, trust, transparency, security levels, industry effects, and future trends.
OSV and the Life of an Open Source Vulnerability
Explore OSV's role in simplifying open source vulnerability management throughout the software development lifecycle, from database creation to guided remediation.
Learn Security with Me - Part 3
Explore cybersecurity fundamentals alongside OpenSSF's Community Manager in this interactive session, gaining practical insights and knowledge.
Learn Security with Me - Part 2
Explore cybersecurity fundamentals alongside OpenSSF's Community Manager in this interactive session, gaining practical insights and hands-on experience.
Learn Security Basics - Part 1
Explore security fundamentals with OpenSSF's Community Manager as she guides you through the initial stages of a comprehensive training program.