The Curious Engineer

All blogs / Security

openssf.org

openssf.org/blog

Security

’20’21’22’23’24’25’26
Posts
452 from 7 Oct 2020 to 6 Nov 2026
Posting
weekly (85 in the last year)
Kind
community

2026 76

  1. From Sigstore to CRA readiness: Sylva’s journey with OpenSSF
  2. OpenSSF Community Day Europe 2026: Driving Systemic Security and Operational Resilience in Open Source
  3. Case Study: Kubescape Completes All Six Security Slam Badges with OpenSSF
  4. The PHP Security Wake-Up Call: Fixes Are Only the Beginning
  5. New LF Research Survey Shows Generative AI Cuts Open Source Coding Time in Half, but 25% of Incoming Pull Requests are Considered AI Slop
  6. New OpenSSF Tech Talk: How Upstream Contribution Minimizes Technical Debt & Streamlines CRA Reporting
  7. Who Checked It? Attestations, Gemara, and CRA Due Diligence
  8. New OpenSSF Guide: Finding and Fixing Vulnerabilities Using AI
  9. Case Study: GitHub Expands Malware Advisories Across Eight Ecosystems with OpenSSF
  10. Introducing Privateer: AI-Assisted Security & Compliance Evaluation Framework Joins the OpenSSF Sandbox
  11. OpenSSF Shares Expanded Membership and New Global Policy Resources During Community Day Europe
  12. Case Study: How Does IBM Turn Open Source Participation Into Enterprise and Career Value?
  13. Inside the OpenSSF Summer Mentorship Showcase: How Emerging Developers Are Strengthening Supply Chain Security
  14. Security Slam 2026 – Fall Edition
  15. We’re In: Enterprise Commitment to Sustainable Package Registries
  16. Grow CRA Readiness: Find Your Path Through the European Union Cyber Resilience Act
  17. Empowering Open Source Security with Scalable Infrastructure
  18. Security Focused Guide for AI Code Assistant Instructions
  19. A Community Guide to the EU CRA September 11 Deadline for Manufacturers
  20. Tech Talk Recap: A Practitioner’s Guide to CRA Readiness
  21. Open by Default After AI: The GDS Guidance and the Enforcement Question
  22. OpenSSF at Hacker Summer Camp 2026: Black Hat & DEF CON Highlights and Recap
  23. Introducing BOMHort: Kubernetes-Native SBOM Visualization & Governance at Scale Joins the OpenSSF Sandbox
  24. Join OpenSSF at AGNTCon + MCPCon North America: Securing Agentic AI
  25. Case Study: Conquering the EU Cyber Resilience Act (CRA) with 1,400 Upstream Security Fixes
  26. Cra readiness a practitioners guide to compliance
  27. Announcing openbao v2 6
  28. Openssf community day europe 2026 schedule highlights what to expect
  29. What is a dependency firewall
  30. Openssf community day north america na first time experience
  31. Representing openssf at africacyberfest
  32. Navigating the openssf is as easy as floating down a lazy river
  33. The cra readiness reality what changed and what didnt between 2025 and 2026
  34. Bridging the gap between code and research why scored 26 matters for open source security
  35. Mini shai hulud where slsas boundaries fall
  36. The skyway to oss security openssf community day north america 2026 recap
  37. Aligning on machine readable signals as the foundation for due diligence
  38. Introducing the first cohort of the openssf ambassador program
  39. Detecting malicious packages using the osv api
  40. Taking stock of the state of european cyber resilience act cra compliance an urgent wake up call for the open source ecosystem
  41. Concise Guide for Developing More Secure Software
  42. Hack to the future the impact and legacy of the darpa aixcc challenge
  43. Secure coding guide for python pyscg first release
  44. The road to gold how cps set a new standard for security and quality in open source
  45. Open infrastructure is not free part ii the hidden cost of running package registries
  46. Secure your spot the openssf community day north america 2026 agenda is live
  47. Why third party notices are breaking at scale what the ecosystem needs next
  48. From noise to signal using runtime context to win the vulnerability management battle
  49. Security slam 2026 celebrating our security champions and project milestones
  50. Openssf tech talk recap securing agentic ai
  51. Rethinking post deployment vulnerability detection
  52. From aixcc to openssf welcoming oss crs to advance ai driven open source security
  53. Kusari partners with openssf to strengthen open source software supply chain security
  54. Introducing the openssf ambassador program
  55. Leading tech coalition invests 12 5 million through openssf and alpha omega to strengthen open source security
  56. Kubecon cloudnativecon europe 2026 co located event deep dive open source securitycon
  57. Securing agentic ai in practice from openssf guidance to real world implementation
  58. First steps towards cyber resilience act conformity biking the cra with balena at fosdem 2026
  59. Introducing the gemara model
  60. Your voice belongs here how to get involved in the openssf community
  61. Case study defending the open source supply chain in a new regulatory era
  62. Getting an openssf baseline badge with the best practices badge system
  63. Advancing package repository security through collaboration
  64. Eu cyber resilience act cra in practice fosdem 2026 from awareness to action
  65. Security slam 2026
  66. Fill out all the margins %f0%9f%93%96 openssf releases compiler annotations guide for c and c
  67. Have a security lesson worth sharing submit a talk at openssf community day north america
  68. Join us at open source securitycon europe 2026 in amsterdam
  69. Openssfatfosdem
  70. Concise Guide for Evaluating Open Source Software
  71. Preserving open source sustainability while advancing cybersecurity compliance
  72. Openssfs 2026 themes a community roadmap for securing the future of open source
  73. Collecting badges building bridges representing openssf and linux foundation across europe
  74. Signal in the noise an industry wide perspective on the state of vex
  75. Your guide to the openssf osps baseline for more secure open source projects
  76. Ai software development security tips and the future part 2

2025 83

  1. Ai software development security tips and the future part 1
  2. Catching malicious package releases using a transparency log
  3. From beginner to builder free openssf and linux foundation education courses
  4. Openssf 2025 annual report is live a year of global growth security wins and community momentum
  5. Recap openssf community day korea 2025
  6. Kubecon keynote recap supply chain reaction and why the osps baseline matters more than ever
  7. Tech talk recap simplifying devsecops in air gapped environments with zarf
  8. Recap open source security week in belgium highlights from ghent to brussels
  9. Building security in open source for financial services openssf at open source finance forum osff nyc
  10. Sboms in the era of the cra toward a unified and actionable framework
  11. A new course on secure ai ml driven software development
  12. Announcing the sigstore transparency log research dataset
  13. Openssf scorecard audit is complete
  14. Building security in open source for financial services openssf at osff
  15. Kubecon cloudnativecon north america 2025 co located event deep dive open source securitycon
  16. Recap openssf tech talk on securing the ai lifecycle
  17. Open infrastructure is not free a joint statement on sustainable stewardship
  18. From beginner to builder your first code contribution
  19. From ghent to brussels openssfs week of policy and security in europe
  20. Improving risk management decisions with sbom data a new whitepaper from the openssf sbom everywhere sig
  21. New openssf guidance on ai code assistant instructions
  22. Celebrating the community openssf at open source summit and openssf community day europe recap
  23. Recap openssf community day india 2025
  24. Open source friday with openssf global cyber policy working group
  25. Openssf community day korea 2025 agenda live
  26. Trustify joins guac
  27. What not to miss at open source summit openssf community day europe
  28. Openssf at black hat usa 2025 def con 33 aixcc highlights big wins and the future of securing open source
  29. Case study how lfx insights and osps baseline validated guacs security in under an hour
  30. Securing ai the next cybersecurity battleground
  31. From beginner to builder understanding openssf community and working groups
  32. Openssf at def con 33 ai cyber challenge aixcc mlsecops and securing critical infrastructure
  33. Visualizing secure mlops mlsecops a practical guide for building robust ai ml pipeline security
  34. %f0%9f%8e%89 celebrating five years of openssf a journey through open source security
  35. Speaking volunteering parenting and exploring nature my week at oss summit na 2025
  36. Case study google secures machine learning models with sigstore
  37. Building indias open source security community join us in hyderabad
  38. New cyber resilience act cra brief guide for oss developers
  39. Recap openssf community day north america 2025
  40. Recap openssf community day japan 2025
  41. Openssf at un open source week 2025 securing the supply chain through global collaboration
  42. On demand webinar cybersecurity skills simplified
  43. An introduction to the openssf model signing oms specification
  44. Member spotlight datadog powering open source security with tools standards and community leadership
  45. Openbao joins the openssf to advance secure secrets management in open source
  46. Cra ready how open source projects can prepare for the eu cyber resilience act
  47. Case study ostif improves security posture of critical open source projects through openssf membership
  48. Guac 1 0 is now available
  49. Maintainers guide securing ci cd pipelines after the tj actions and reviewdog supply chain attacks
  50. From sandbox to incubating gittufs next step in open source security
  51. Choosing an sbom generation tool
  52. Oss and the cra am i a manufacturer or a steward
  53. Member spotlight trail of bits driving open source security through standards prototypes and policy
  54. Call for proposals now open for open source securitycon 2025
  55. Case study ericssons c c compiler options hardening guide and openssf collaboration
  56. Call for proposals for openssf community day europe open through 26 may 2025
  57. Announcing the summer 2025 openssf mentorship program
  58. New guide on simplifying software component updates
  59. Openssf tech talk recap using the osps baseline to navigate standards and regulations
  60. Recognizing academic excellence in open source and secure software education
  61. Announcing the release of the memory safety continuum
  62. Repository service for the update framework rstuf reaches new security milestone with successful audit
  63. Vulnerability enumeration conundrum an open source perspective on cve and cwe
  64. New free course understanding the eu cyber resilience act cra lfel1001
  65. Tech talk preview strengthening open source through security standards and global policy
  66. Key takeaways from vulncon 2025 insights from the openssf community
  67. Openssf community day na 2025 agenda live
  68. Launch of model signing v1 0 openssf ai ml working group secures the machine learning supply chain
  69. Guarddog strengthening open source security against supply chain attacks
  70. Beyond the software bill of materials sbom ensuring integrity with attestations event recap
  71. What will my business need to do for the eu cra
  72. Cncf openssf announce open source securitycon 2025
  73. Openssf policy summit dc 2025 recap
  74. 2025 openssf content themes strengthening open source security throughout the year
  75. New free course security for software development managers lfd125
  76. Fosdem 2025 openssf community wrap up
  77. Does the eu cra affect my business
  78. Securing public sector supply chains is a team sport
  79. Openssf community day na 2025 call for proposals now open
  80. Alpha omega 2024 annual report
  81. Predictions for open source security in 2025 ai state actors and supply chains
  82. Accelerating openssf adoption unlocking scorecard insights with a centralized dashboard
  83. Soss community day india 2024 wrap up

2024 109

  1. Cra stewards and manufacturers workshop key takeaways and next steps
  2. Staying oss safe during the holidays
  3. Sigstorecon 2024 advancing software supply chain security
  4. Understanding the cra openssfs role in the cyber resilience act implementation part 2
  5. The openssf 2024 annual report is live
  6. Shaping the future of generative ai a focus on security
  7. Understanding the cra openssfs role in the cyber resilience act implementation part 1
  8. The openssf armored goose honk advancing open source security
  9. How we can learn from open source software to address the challenges of ai
  10. Red hats collaboration with the openssf and osv dev yields results red hat security data now available in the osv format
  11. Openssf adds minder as a sandbox project to simplify the integration and use of open source security tools
  12. Cybersecurity awareness month 2024 stay secure stay informed
  13. Case study kusaris implementation of openssf tools and services
  14. Developer relations the human connection driving open source security
  15. Openssf education tech talk highlights future opportunities
  16. Recap on soss community day eu
  17. Openssf at grace hopper celebration 2024 advancing diversity and security in open source
  18. Join us at the oss security meetup in tokyo japan 2
  19. Must attend sessions at soss community day eu and open source summit europe 2024
  20. Simplify sbom management for developers introducing bomctl
  21. Prioritizing security key findings from the openssf survey for financial institutions
  22. Aixcc semifinals at def con showcase ais potential in securing critical oss projects
  23. Innovative supply chain security for enterprise cloud platform service
  24. A birds eye view of lfd 121 developing secure software and why every developer should take it
  25. Guac v0 8 0 released
  26. Announcing sigstorecon supply chain day
  27. Mitigating attack vectors in github workflows
  28. Whats next for open source workshop highlights and calls to action to inspire progress for global sustainability
  29. Call for proposals soss community day japan 2024
  30. Oss security adventure recap of recent security focused events featuring openssf
  31. New guide for package repositories to adopt trusted publishers
  32. How to make programming language package repositories more secure
  33. Neo malware malicious open source packages
  34. Soss fusion 2024 cfp results a look at our diverse and engaging program
  35. Soss community day eu agenda now live
  36. Celebrating excellence an interview with golden egg award winner christopher crob robinson
  37. Recognizing excellence in oss community golden egg award nominations are now open
  38. Ai cyber challenge aixcc and the needle linux kernel vulnerability part 2
  39. Ai cyber challenge aixcc and the needle linux kernel vulnerability part 1
  40. Learn how to develop secure software
  41. Why are organizations struggling to implement secure software development
  42. Chainguard enhances security with osv advisory feed
  43. Improving openssf scorecard scores stepsecurity automation for four key checks
  44. A deep dive into sbomit and attestations
  45. An open source approach to threat mitigation in aws
  46. Know your regular expressions securing input validation across languages
  47. July in nyc join us at the united nations uns ospos for good 2024 conference the whats next for open source event
  48. Openssf guac tech talk highlights
  49. Ubuntu security notices now available in osv
  50. Openssf case study enhancing open source security with sigstore at stacklok
  51. Final call submit your technical initiatives ti funding request by june 7th 2024
  52. The oss security adventure exploring the frontlines of oss security through soss policy summit rsa conference and japan meetup
  53. Beyond the openssf an introduction to other security efforts across the linux foundation
  54. The opportunity for dei participation in the security industry and openssf
  55. Introducing artifact attestations now in public beta
  56. Openssf joins open source consortium to define e u cra security specifications
  57. Enhancing open source security introducing siren by openssf
  58. Where does your software really come from
  59. Join our upcoming openssf tech talk proactive supply chain security with guac
  60. Call for proposals submit to speak at soss community day eu
  61. Unlock the keys to improved software security
  62. Drubom an sbom for drupal
  63. Recap of soss community day north america 2024
  64. Spotlight on the openssf ai ml working group
  65. Join us at the oss security meetup in tokyo japan with general manager omkhar soss community day north america event report
  66. Beyond scores with openssf scorecard granular structured results for custom policy enforcement
  67. Unveiling the golden egg award winners celebrating excellence in open source security
  68. Open source security openssf and openjs foundations issue alert for social engineering takeovers of open source projects
  69. Sessions you wont want to miss at soss community day na and open source summit north america 2024
  70. Whats in the soss podcast is now live
  71. Join us for a ttx securing oss empowering maintainers
  72. Static binary analysis a final exam for software supply chain protection
  73. Xz backdoor cve 2024 3094
  74. Vulncon 2024 wrap up securing the ecosystem through global cooperation
  75. How intel uses openssf scorecard to better secure its software portfolio
  76. Empowering women in tech an interview on angela jeffreys journey to cybersecurity
  77. Openssf scorecard tech talk highlights
  78. Sigstore graduates a monumental step towards secure software supply chains
  79. Driving change together the openssf takes on vulncon
  80. How openssf technical initiatives can receive strategic funding
  81. Join openssf for our first tabletop exercise ttx at soss community day north america
  82. Openssf releases plan for improving software developer security education
  83. The india initiative announcement
  84. Openssf marketing advisory council aims to shape the future of open source security advocacy
  85. Participate in our survey on secure software development education
  86. Guac joins openssf as incubating project
  87. Openssf and cisa join forces to secure open source software
  88. Openssf scorecard evaluating and improving the health of critical oss projects
  89. Come to first openssf tech talk of the year on scorecard
  90. Golden egg award celebrating exceptional contributions in the openssf community
  91. Openssf supports efforts to build more secure and measurable software
  92. Soss community day north america na agenda live
  93. Submit to speak at soss fusion 2024
  94. Openssf responds to us cisa rfi on cybersecurity risk and secure by design software
  95. Alpha omega 2023 annual report
  96. Scaling up supply chain security implementing sigstore for seamless container image signing
  97. Linux kernel achieves cve numbering authority status
  98. Announcing the first ever soss fusion conference how you can get involved
  99. Openssf participates in department of commerce consortium dedicated to ai safety
  100. Openssf securing software repositories working group releases principles for package repository security
  101. Post quantum cryptography alliance launch
  102. Time is of the essence to mitigate vulnerabilities like leaky vessels
  103. Cve 2023 6246 root access vulnerability in glibc
  104. Openssf champions a more secure future in collaboration with public sector
  105. Maintainer motivations challenges and best practices on open source software security
  106. Oss security sessions fosdem survival guide
  107. Introducing gittuf a security layer for git repositories
  108. Submit to speak at soss community day north america 2024
  109. Openssf election results for technical advisory council and representatives to the governing board

2023 107

  1. Recap of openssf day japan
  2. Openvex and open source vulnerability scanners how the dynamic duo improves vulnerability management
  3. Whats next in open source security
  4. Deconstructing the ai cyber challenge aixcc
  5. 2023 year in review openssf publishes annual report
  6. Openssf expands support for ai cyber challenge aixcc
  7. Strengthening cybersecurity nsa and esf partners advocate open source software security with sbom emphasis
  8. Introducing sbomit adding verification to sboms
  9. Openssf end users working group representing the interests of open source software consumers
  10. Openssf responds to the cisa rfc on software identification ecosystem analysis
  11. Finding and fixing bugs in open source software at scale with a grant from alpha omega
  12. Openssf releases top 10 secure software development guiding principles
  13. Strengthening the fort openssf releases compiler options hardening guide for c and c
  14. Cybersecurity in energy infrastructure the value of open source software
  15. Openssf introduces guide to becoming a cve numbering authority as an open source project
  16. Sigstore simplifying code signing for open source ecosystems
  17. Openssf publishes mission vision values and strategy
  18. Securing the software supply chain report recommends sbom consumption practices for critical infrastructure providers
  19. Openssf kicks off guest blog editorial review panel to amplify voices in the security community
  20. Alpha omega to continue support of rust foundation security initiative in 2024
  21. Openssf supports oss security and linux distros mailing lists
  22. How to use open source to help comply with scm best practices a tutorial on combining openssf scorecard and legitify
  23. Openssf responds to us federal government rfi on open source software security
  24. Alpha omega grant to help homebrew reach slsa build level 2
  25. Openssf co signs industry joint statement on article 45 in the eus eidas regulation
  26. Us white house executive order on safe secure and trustworthy ai
  27. Openssf identifying security threats working group evaluating the health of open source projects
  28. Safeguarding your data how to harden your systems
  29. 3 new express learning courses on security for cloud pros
  30. Openssf launches security job board for the community
  31. Secure by design guidance from governments
  32. Slsa tech talk highlights
  33. Openssf day japan agenda now live
  34. Openssf welcomes new governing board chair arun gupta
  35. Reflections on 2023 Milestones from Two-Term Board Chair, Jamie Thomas – Open Source Security Foundation
  36. US Government Fact Sheet on Improving Security of Open Source Software in Operational Technology and Industrial Control Systems (OT / ICS) – Open Source Security Foundation
  37. Introducing OpenSSF’s Malicious Packages Repository – Open Source Security Foundation
  38. OpenSSF introduces the Specification Security Insights 1.0 – Open Source Security Foundation
  39. HTTP/2 Rapid Reset Vulnerability Highlights Need for Rapid Response – Open Source Security Foundation
  40. Recap of OpenSSF Day Europe – Open Source Security Foundation
  41. Running Sigstore as a Managed Service: A Tour of Sigstore’s Public Good Instance – Open Source Security Foundation
  42. OpenSSF Welcomes New Chief Architect, Dana Wang – Open Source Security Foundation
  43. Announcing sigstore-python 2.0 – Open Source Security Foundation
  44. OpenSSF Securing Critical Projects Working Group: Identifying and Helping Improve Top Open Source Projects – Open Source Security Foundation
  45. Threat Modeling the Supply Chain for Software Consumers – Open Source Security Foundation
  46. Advancing Rustls and Rust for Linux with OpenSSF Support – Open Source Security Foundation
  47. Join us for an OpenSSF Tech Talk on SLSA – Open Source Security Foundation
  48. OpenSSF Releases Source Code Management Best Practices Guide – Open Source Security Foundation
  49. What You Need to Know About the Linux Foundation’s New Vulnerability Reporting Policy – Open Source Security Foundation
  50. CISA’s Open Source Software Security Roadmap – Open Source Security Foundation
  51. Sessions Not to Miss at Open Source Summit and OpenSSF Day Europe – Open Source Security Foundation
  52. Behind the Scenes of the Alpha-Omega Summer Mentorship Program – Open Source Security Foundation
  53. VDR, VEX, OpenVEX and CSAF – Open Source Security Foundation
  54. Strengthening Open Source Software: Best Practices for Enhanced Security – Open Source Security Foundation
  55. Introducing RSTUF, Repository Service for TUF – Open Source Security Foundation
  56. OpenSSF Securing Software Repositories Working Group: Repositories, Registries, and Tools – Open Source Security Foundation
  57. OpenSSF Scorecard Launches v4.12 with Support for GitLab – Open Source Security Foundation
  58. Submit to Speak at OpenSSF Day Japan – Open Source Security Foundation
  59. What You Need to Know About the US Federal Government’s RFI on Open Source Software Security – Open Source Security Foundation
  60. Join Us in Adopting the Open Source Consumption Manifesto – Open Source Security Foundation
  61. The Rising Threat of Software Supply Chain Attacks: Managing Dependencies of Open Source Projects – Open Source Security Foundation
  62. Understanding and Applying the OpenSSF Criticality Score in Open Source Projects – Open Source Security Foundation
  63. OpenSSF Vulnerability Disclosures Working Group Helps Guide and Automate Handling Risk – Open Source Security Foundation
  64. Manage how you protect your assets at scale with SBOMs – Open Source Security Foundation
  65. Fuzz Introspector: optimizing fuzzing workflows – Open Source Security Foundation
  66. OpenSSF Day Europe Agenda Now Live – Open Source Security Foundation
  67. SBOM Everywhere and the Security Tooling Working Group: Providing the Best Security Tools for Open Source Developers – Open Source Security Foundation
  68. PSF Welcomes New Security Developer in Residence with Support from Alpha-Omega – Open Source Security Foundation
  69. Why SBOM Generators Need to Accurately Represent Open Source Licenses – Open Source Security Foundation
  70. OpenSSF Day at Open Source Summit Europe: Call for Proposals Now Open – Open Source Security Foundation
  71. OpenSSF Supply Chain Integrity Working Group Provides Security Guidance, Practical Frameworks, and Tools – Open Source Security Foundation
  72. Meet New OpenSSF GM Omkhar Arasaratnam – Open Source Security Foundation
  73. Inaugural Open Source Security Singapore Meetup – Open Source Security Foundation
  74. Takeaways from OpenSSF Day North America – Open Source Security Foundation
  75. Exploring the Latest Advances in SBOMs from the Devroom – Open Source Security Foundation
  76. We Want to Hear from You: Take the OpenSSF Software Security Awareness Survey – Open Source Security Foundation
  77. Sessions You Won’t Want to Miss at Open Source Summit and OpenSSF Day NA – Open Source Security Foundation
  78. How I Got Involved with the OpenSSF – Open Source Security Foundation
  79. Getting to know the Open Source Vulnerability (OSV) format – Open Source Security Foundation
  80. OpenSSF Seats New Technical Advisory Council and Security Community Individual Representative – Open Source Security Foundation
  81. Join Us at the OSS Security Meetup in Tokyo, Japan – Open Source Security Foundation
  82. Distinguish between source and vendor – Open Source Security Foundation
  83. Assessing Product Risk Using SBOMs and OpenSSF Scorecard – Open Source Security Foundation
  84. Spotlight on OpenSSF Board Member: Brian Fox, Co-Founder and CTO, Sonatype – Open Source Security Foundation
  85. SBOMs, So Far, So Good, So What? – Open Source Security Foundation
  86. OpenSSF Best Practices Working Group Provides Security Guidance and Tools for Open Source Developers – Open Source Security Foundation
  87. Taking the Pulse of Leading Software Repositories’ Security – Open Source Security Foundation
  88. Clarifying Sigstore Terms of Use – Open Source Security Foundation
  89. OpenSSF Day North America Agenda Now Live – Open Source Security Foundation
  90. The Role of Foundations in Securing OSS – Open Source Security Foundation
  91. SBOM Everywhere Update and Python SPDX-Tools – Open Source Security Foundation
  92. Improving Open Source Security through Collaboration: March 2023 OpenSSF Town Hall Highlights – Open Source Security Foundation
  93. Improving Supply Chain Security: IBM as a user and a contributor to Open Source Security Foundation Scorecard – Open Source Security Foundation
  94. New SLSA++ Survey Reveals Real-World Developer Approaches to Software Supply Chain Security – Open Source Security Foundation
  95. Draft Version 1.0 of SLSA Open for Comments – Open Source Security Foundation
  96. Why Open Source is Infrastructure, and Why it Matters – Open Source Security Foundation
  97. How to Make High-Quality SBOMs – Open Source Security Foundation
  98. See you at the next OpenSSF Town Hall on March 16th – Open Source Security Foundation
  99. Inaugural OpenSSF Hong Kong Meetup on March 1 – Open Source Security Foundation
  100. Congratulations to Newly Elected OpenSSF Governing Board Members – Open Source Security Foundation
  101. OpenSSF Day at Open Source Summit North America Call for Proposals – Open Source Security Foundation
  102. Spotlight on OpenSSF Board Member: Vincent Danen, Vice President of Product Security, Red Hat – Open Source Security Foundation
  103. Join Us at the First OSS Security Meetup in Tokyo, Japan – Open Source Security Foundation
  104. Independent Security Audit Impact Report – Open Source Security Foundation
  105. Talking OSS Security in Europe this February – Open Source Security Foundation
  106. 10 Sessions Not to Miss at CloudNativeSecurityCon – Open Source Security Foundation
  107. Spotlight on OpenSSF Board Member: Tracy Ragan, CEO, DeployHub – Open Source Security Foundation

2022 55

  1. OpenSSF Year in Review – Open Source Security Foundation
  2. Engaging Policy Makers and the Ecosystem on Open Source Software Globally – Open Source Security Foundation
  3. Takeaways from OpenSSF Day Japan – Open Source Security Foundation
  4. Avoiding the Next Log4Shell: Learning from the Log4j Event, One Year Later – Open Source Security Foundation
  5. Alpha-Omega Project First Year In Review, Plus New Funding Pledge – Open Source Security Foundation
  6. Apples and apples? Comparing Approaches to Measuring Criticality and Risk at the OpenSSF – Open Source Security Foundation
  7. Free OpenSSF Developing Secure Software Training Course Now Available in Japanese – Open Source Security Foundation
  8. Join Us For OpenSSF Day at Open Source Summit Japan – Open Source Security Foundation
  9. Contributor Q&A with Christopher “CRob” Robinson, Director of Security Communications, Intel Corporation – Open Source Security Foundation
  10. OpenSSF Expands Supply Chain Integrity Efforts with S2C2F – Open Source Security Foundation
  11. SigstoreCon Highlights – Open Source Security Foundation
  12. Meet a Maintainer: Naveen Srinivasan, Software Engineer, Endor Labs – Open Source Security Foundation
  13. Meet a Maintainer: Luke Hinds, Security Engineering Lead, OCTO, Red Hat – Open Source Security Foundation
  14. OpenSSF Project Alpha-Omega Invests in the OpenJS Foundation and jQuery to Help Secure the Consumer Web – Open Source Security Foundation
  15. Report Finds OpenSSF Scorecards Are Highly Effective Measures to Assess Project Security – Open Source Security Foundation
  16. Contributor Q&A with Melba Lopez, STSM – Supply Chain Security, IBM – Open Source Security Foundation
  17. Meet a Maintainer: Q&A with Priya Wadhwa, Software Engineer, Chainguard – Open Source Security Foundation
  18. Securing Open Source Software is Securing Critical Infrastructure – Open Source Security Foundation
  19. New Meet a Maintainer Series: Q&A with Azeem Shaikh, Senior Software Engineer, Google – Open Source Security Foundation
  20. How OSPOs Can Be a Key Lever for Open Source Sustainability and Security – Open Source Security Foundation
  21. OpenSSF Day at Open Source Summit Europe Highlights – Open Source Security Foundation
  22. First-Ever SigstoreCon at KubeCon + CloudNativeCon North America 2022 – Open Source Security Foundation
  23. The United States Securing Open Source Software Act: What You Need to Know – Open Source Security Foundation
  24. Introducing the New OpenSSF End Users Working Group – Open Source Security Foundation
  25. Alpha-Omega Project Announces Over $1.5M in Grants to Critical Open Source Projects and New Omega Analysis Toolchain – Open Source Security Foundation
  26. Introducing New Concise Guides for Developing More Secure Software and Evaluating Open Source Software – Open Source Security Foundation
  27. Coordination is Key! The OpenSSF’s CVD Guide for Finders – Open Source Security Foundation
  28. Funding Python SPDX Development with the OpenSSF and SBOM Everywhere – Open Source Security Foundation
  29. Show Off Your Security Score: Announcing Scorecards Badges – Open Source Security Foundation
  30. npm Best Practices for the Supply-Chain – Open Source Security Foundation
  31. Outcomes from Open Source Software Security Summit in Japan – Open Source Security Foundation
  32. Upleveling Everybody to Secure the OSS Supply Chain – OpenSSF August Town Hall Highlights – Open Source Security Foundation
  33. Announcing OpenSSF Day at Open Source Summit Europe – Open Source Security Foundation
  34. Secure Coding Practice – A Developer’s Learning Experience of Developing Secure Software Course – Open Source Security Foundation
  35. Get Up to Speed with OpenSSF at Next Virtual Town Hall – Open Source Security Foundation
  36. Take Survey to Help Improve Software Supply Chain Integrity Practices – Open Source Security Foundation
  37. Join Us at the First OpenSSF Open Source Security Meetup in India – Open Source Security Foundation
  38. OpenSSF Supports Movements toward Multi-Factor Authentication – Open Source Security Foundation
  39. OpenSSF Day Videos Now Available from Open Source Summit North America – Open Source Security Foundation
  40. Results of Sigstore and slf4j Security Audits Including 1 High Risk Vulnerability Found and Fixed – Open Source Security Foundation
  41. Free Training Course Teaches How to Secure a Software Supply Chain with Sigstore – Open Source Security Foundation
  42. State of Open Source Security 2022 from Snyk & the Linux Foundation – Open Source Security Foundation
  43. OpenSSF Funds Python and Eclipse Foundations and Acquires SOS.dev through Alpha-Omega Project – Open Source Security Foundation
  44. OpenSSF Makes Secure Software Development Training Available on Organizations’ Learning Management Systems – Open Source Security Foundation
  45. New Untold Stories of Open Source Podcast Features OpenSSF’s Brian Behlendorf on his Journey to Securing the FOSS Software Supply Chain – Open Source Security Foundation
  46. Introducing Fuzz Introspector, an OpenSSF Tool to Improve Fuzzing Coverage – Open Source Security Foundation
  47. Testimony to the US House Committee on Science and Technology – Open Source Security Foundation
  48. Introducing Package Analysis: Scanning open source packages for malicious behavior – Open Source Security Foundation
  49. Your Favorite Software Repositories, Now Working Together – Open Source Security Foundation
  50. OpenSSF Selects Node.js as Initial Project to Improve Supply Chain Security – Open Source Security Foundation
  51. Free Developing Secure Software Training Course From OpenSSF Now Available – Open Source Security Foundation
  52. Open Source is Global, So OpenSSF Must Be Too – Open Source Security Foundation
  53. OpenSSF Webinar: Introduction to Project Alpha-Omega – Open Source Security Foundation
  54. Reducing Security Risks in Open Source Software at Scale: Scorecards Launches V4 – Open Source Security Foundation
  55. The OpenSSF and the Linux Foundation Address Software Supply Chain Security Challenges at White House Summit – Open Source Security Foundation

2021 16

  1. Open Source Foundations Must Work Together to Prevent the Next Log4Shell Scramble – Open Source Security Foundation
  2. Securing Critical Open Source Projects with Multifactor Authentication – Open Source Security Foundation
  3. November Town Hall Recording – Open Source Security Foundation
  4. OpenSSF Quarterly Town Hall Announcement – UPDATED – Open Source Security Foundation
  5. The World’s Major Technology Providers Converge to Improve the Security of Software Supply Chains – Open Source Security Foundation
  6. Announcing the OpenSSF Vulnerability Disclosure WG guide to disclosure for OSS projects – Open Source Security Foundation
  7. Introducing the Allstar GitHub App – Open Source Security Foundation
  8. July 2021 Update – New members and new resources for Best Practices and Vulnerability Disclosures underway – Open Source Security Foundation
  9. How LF communities enable security measures required by the US Executive Order on Cybersecurity – Open Source Security Foundation
  10. Introducing the Security Reviews Initiative – Open Source Security Foundation
  11. May 2021 Update: OpenSSF Unveils New Security Initiative – Open Source Security Foundation
  12. Introducing the Security Metrics Initiative – Open Source Security Foundation
  13. Upcoming OpenSSF Town Hall on May 3, 2021 – Open Source Security Foundation
  14. Upcoming OpenSSF Town Hall on February 22 – Open Source Security Foundation
  15. January 2021 Update: New Technical Vision Informs Working Group Progress – Open Source Security Foundation
  16. Digital Identity Attestation Roundup – Open Source Security Foundation

2020 6

  1. Introducing the OpenSSF CVE Benchmark – Open Source Security Foundation
  2. OpenSSF Town Hall Recording: Now Available! – Open Source Security Foundation
  3. Security Scorecards for Open Source Projects – Open Source Security Foundation
  4. Announcing: Secure Software Development EdX course, Sign Up Today! – Open Source Security Foundation
  5. OpenSSF Public Town Hall – November 9 2020, 10am Pacific – Open Source Security Foundation
  6. OpenSSF seeks Security Community Individual Representative for Governing Board – Open Source Security Foundation