OpenSSF
Joining the FINOS AI security initiative
It's only been four months since I last posted about Sonatype's contributions to the open source security ecosystem — not too bad! ...
Behind the Baseline: Reflecting on the launch of the Open Source Project Security Baseline
It's been a while since I've shared an update on the work Sonatype is doing in the open source ecosystem, so I'm excited to share an update on a few things we're ...
The State of Open Source Cloud-Native Security
As 2024 kicks off, here's where cloud-native supply chain security stands and what to expect in the immediate future ...
OpenSSF responds to CISA, advocates for a multifaceted approach to software identification
In October 2023, the Cybersecurity and Infrastructure Security Agency (CISA) published a white paper Software Identification Ecosystem Option Analysis. Following the release of that paper, the Department of Homeland Security (DHS), CISA's ...
OpenSSF Head Delivers AI Warning for Application Security
The overall state of application security is likely to worsen if organizations fail to take note of advances in artificial intelligence (AI). Brian Behlendorf, general manager for the Open Source Security Foundation ...
Critical Infrastructure’s Open Source Problem
Open source has a security problem, and that could have real-world impact when it affects critical infrastructure. According to research from Synopsis, 78% of code in codebases is open source, and 81% ...
OpenSSL ‘CRITICAL’ Bug — Sky Falling — Patch Hits 11/1
OpenSSL has a new ‘critical’ bug. But it’s a secret until next month ...
OpenSSF Announces Project for Open Source Security- TechStrongTV
OpenSSF is excited to announce the Alpha-Omega Project to improve the security posture of open source software (OSS) through direct engagement of software security experts and automated security testing. Microsoft and Google ...
Techstrong TV: 19 Organizations Join OpenSSF
OpenSSF announced 19 new organizations have joined OpenSSF to help identify and fix security vulnerabilities in open source software and develop improved tooling, training, research, best practices, and vulnerability disclosure practices. Alan ...
OpenSSF Seeks $150M+ to Address Open Source Software Security
The Open Source Security Foundation (OpenSSF) this week outlined a plan to better secure open source software by focusing on 10 streams of investment that, in total, would require more than $150 ...
