SOSS Fusion 2024: Uniting Security Minds for the Future of Open Source
Dwayne McDaniel
Posted on November 11, 2024
openssf
Your dependencies have dependencies: new features to assess risk
Dan Barr
Posted on November 12, 2024
Paid maintainers are significantly more likely to implement critical security practices than unpaid maintainers
Chris Grams
Posted on October 3, 2024
Contributing Minder to the OpenSSF, out of a deep belief in the power of the open source community
Luke Hinds
Posted on November 4, 2024
Maintainers are much more likely to align with the OpenSSF Scorecard when they are paid for their work
Chris Grams
Posted on October 1, 2024
Maintainers are spending 3 more time on security than they did a few years ago
Chris Grams
Posted on September 26, 2024
How To Get There: Bridging The Technology Gap Preventing You From Adopting A Secrets-free Machine Identity Framework
Dwayne McDaniel
Posted on October 14, 2024
60% of maintainers are (still) not paid for their work
Chris Grams
Posted on September 17, 2024
OpenSauced on Azure: Lessons learned from a near-zero downtime migration
John McBride
Posted on October 15, 2024
Making Sense of Open-Source Vulnerability Databases: NVD, OSV, etc.
C.J. May
Posted on October 7, 2024
Java library for developing backend with reactive programming
Hoàng Tiến
Posted on October 4, 2024
Elevating Cloud Security: Highlights from CloudNativeSecurityCon 2024
Dwayne McDaniel
Posted on July 12, 2024
How does Cal.com check out?
BekahHW
Posted on August 13, 2024
How we use Kubernetes jobs to scale OpenSSF Scorecard
John McBride
Posted on August 8, 2024
Introducing OpenSSF Scorecard for OpenSauced
John McBride
Posted on August 6, 2024
New Securi-Taco Tuesdays Livestream (Monthly)
Stacey Potter
Posted on July 11, 2024
Upstream preview: Secure by design with Aeva Black and Jack Cable from CISA
Cait Bixby
Posted on May 31, 2024
Safe and Secure Consumption of Open Source Libraries
Abhisek Datta
Posted on July 4, 2024
Is Open Source More Secure? Understanding the Nuances
Emmanuelbinen
Posted on May 16, 2024
Pipeline Integrity and Security in DevSecOps
Thomas Segura
Posted on June 5, 2024
OpenSSF Case Study: Enhancing Open Source Security with Sigstore at Stacklok
Ariel
Posted on June 4, 2024
Upstream preview: Life after the xz utils backdoor hack
Kristina Kaldenbach
Posted on May 31, 2024
Heartbleed and XZ Backdoor Learnings: Open Source Infrastructure Can Be Improved Efficiently With Moderate Funding
Otto Kekalainen
Posted on April 7, 2024
NodeJS 22 is Live
Emmanuel Eneche
Posted on April 25, 2024
SCaLE 21x: A Community Event About Much More Than Linux
Dwayne McDaniel
Posted on April 9, 2024
Unpacking the xz Backdoor Incident: A Critical Alert for Linux Users
Wahit Fitriyanto
Posted on March 31, 2024
12 Free Courses To Help You Develop More Secure Software - Shift Security Left
Schalk Neethling
Posted on April 8, 2024
Navigating the Future of Open Source Security: Insights from Industry Leaders
Nikita Koselev
Posted on March 4, 2024
Navigating the Future of Open Source Security: Insights from Industry Leaders
Nikita Koselev
Posted on March 4, 2024
A Deep Dive into OCSF & VEX - Unified Standards for Security Management
David Melamed
Posted on February 21, 2024
Join Our Newsletter. No Spam, Only the good stuff.
Sign up to receive the latest update from our blog.