OpenSSF

The World’s Major Technology Providers Converge to Improve the Security of Software Supply Chains

Imagine you have created an open source project that has become incredibly popular.  Thousands, if not millions, of developers worldwide, rely on the lines of code that you wrote. You...

Open Source Security Foundation Raises $10 Million in New Commitments to Secure Software Supply Chains

Announcing the OpenSSF Vulnerability Disclosure WG guide to disclosure for OSS projects

Authors: Anne Bertucio, Christopher Robinson, David Wheeler, OpenSSF Vulnerability Disclosure WG members https://github.com/ossf/oss-vulnerability-guide/blob/main/maintainer-guide.md Vulnerability disclosure is the process of reporting, remediating, and communicating the details of a discovered vulnerability.  This...

Introducing the Allstar GitHub App

Authors: Mike Maraya, Jeff Mendoza We’re excited to announce Allstar, a GitHub app that provides automated continuous enforcement of security best practices for GitHub projects. With Allstar, owners can check...

How LF communities enable security measures required by the US Executive Order on Cybersecurity

Our communities take security seriously and have been instrumental in creating the tools and standards that every organization needs to comply with the recent US Executive Order Overview The US...

Technology and Enterprise Leaders Combine Efforts to Improve Open Source Security

New collaboration called Open Source Security Foundation (OpenSSF) consolidates industry efforts to improve the security of open source software SAN FRANCISCO, Calif., Aug 3, 2020 – The Linux Foundation, today...