Open Source Security Foundation

Linux Foundation Member Summit
2025-03-18 - 2025-03-20
Attending: The OpenSSF is attending the Linux Foundation Member Summit 2025. This event is the annual gathering for Linux Foundation member organizations. An annual gathering for Linux Foundation members that fosters collaboration, innovation, and partnerships among the leading projects and organizations working to drive digital transformation with open source technologies. It is a must-attend for business and technical leaders looking to advance open source strategy, implementation, and investment in their organizations and learn how to collaboratively manage the largest shared technology investment of our time.

Beyond the SBOM: Ensuring Integrity with Attestations
2025-03-05
The “Beyond the SBOM: Ensuring Integrity with Attestations” event, hosted by the SBOMit community, seeks to raise awareness about the limitations of single SBOMs and even signed SBOMs in ensuring software supply chain security. This summit will highlight the critical role of attestations in verifying and enhancing SBOM integrity, featuring talks from industry leaders and breakout sessions to foster collaboration and innovation in the field.

OpenSSF Policy Summit DC 2025
2025-03-04
Hosting: OpenSSF Policy Summit is coming to DC on March 4, 2025! This event addresses the security challenges for the consumption of Open Source Software (OSS) in critical infrastructure sectors and beyond. The event is hosted by the Open Source Security Foundation (OpenSSF), an initiative of the Linux Foundation. Learn more about the event: https://events.linuxfoundation.org/openssf-policy-summit-dc/

Live stream: Sparks Fly, When Security Meets AI
2025-02-13 14:00 - 15:00 (Asia/Kolkata)
AI is now everywhere! But how prepared are we to protect our data, models, and defend other assets?
Join us for a special episode of our live streams where we explore the critical intersection of open source security and artificial intelligence. We’ll delve into the lack of security measures protecting AI systems and the urgent need to address the growing needs. This stream will help you gain an understanding of the vast attack surface in AI, from data poisoning and model theft to adversarial attacks and malicious code injection. It will also educate you about the potential risks of running untrusted AI/ML models, which would lead to attacks including cryptojacking, remote code execution, and data breaches.
This live stream features special guest Keerthana Rampa, who is an Associate Project Manager at AccuKnox. She is a leading expert in AI security and will share her deep knowledge and insights on the challenges and solutions in this rapidly evolving field.

Livestream: All About SaaS Security
2025-02-06 14:00 - 15:00 (Asia/Kolkata)
Join us for a live stream with Aparna Hinge, Principal Product Manager at CheckRed, as she shares her extensive experience in securing SaaS applications. With over 15 years in building secure software, including 10 years in groundbreaking security research and product design, Aparna brings a wealth of knowledge to the table. As a Certified Information Systems Auditor (CISA), she possesses deep expertise in technical areas coupled with governance and policy requirements. This allows her to navigate the complexities of SaaS security with aplomb!
In this captivating session, Aparna will pull back the curtain on the often-hidden world of SaaS security, sharing firsthand accounts of the challenges she’s conquered and the intricate technical puzzles she’s solved while architecting robust security for the applications we rely on every day. Discover the nuances of safeguarding SaaS environments and glean invaluable wisdom from a true industry veteran.
CheckRed’s comprehensive security posture management (SSPM + CSPM) approach delivers a streamlined, centralized cloud security solution, providing comprehensive coverage across major cloud providers like AWS, Azure, GCP, and Linode, as well as over 50 widely used SaaS applications, including Salesforce, Microsoft 365, ServiceNow, and Okta.
Remember to join us live on Thu, Feb 6th, 2025!

Meetup: Global Cyber Policy WG at FOSDEM 2025
2025-02-02
Join the OpenSSF community at FOSDEM in Belgium, Brussels on Sunday, 2 February for a Global Cyber Policy WG Meetup!
It’s an informal gathering where you can meet some of your fellow security contributors working on CRA collaboration efforts.
Location: We will gather at the CNCF / LF Europe stand (K2-A-16 – Building K, Level 2, #16) and then find an open table to meet.
Important Note: There are two meeting times to accommodate schedule conflicts with DevRooms, etc. 14:00 and 17:00.
Add February 2 – 14:00 to Your Calendar
Add February 2 – 17:00 to Your Calendar

SOSS Community Day India
2024-12-10
Hosting: Join us in Delhi, India this December! Secure Open Source Software (SOSS) Community Days are an opportunity for Community Members from across the Security and Open Source ecosystem to get together and share ideas and progress on capabilities that make it easier to sustainably secure the development, maintenance, and consumption of the open source software (OSS) we all depend on. This year, we’re bringing our favourite community event to India. RSVP now!

Building Security Tooling: Trials and Triumphs
2024-11-28 14:00 - 15:00 UTC
Join Barun Acharya, who is many things ― a CNCF Ambassador, maintainer for KubeArmor, and works as a Software Engineer at Accuknox, as he gives us the inside story of what it is like to build and maintain security tooling. In his conversation, he will be explaining the common pitfalls one can expect when designing security tooling and the difficult decisions developer habits put them in.
If you’ve wondered how to strike a balance between building opinionated tooling that sets out to accomplish something versus being an open platform for developers, this live stream is certain to spark your interest. Join us to learn more about security, tooling, and the challenges that surround security awareness.

Policy, Security, and the Software Supply Chain
2024-11-27 14:00 - 15:00 (Asia/Kolkata)
﻿
Join us for a live stream with security expert Abhisek Datta! Abhisek has over a decade of experience in platform & security engineering, DevSecOps, and building secure B2B SaaS platforms.
In this session, Abhisek will discuss the critical intersection of policy, security, and the modern software supply chain. He’ll also demonstrate vet, an open-source tool he co-developed to identify risks in open source dependencies, helping engineering and security teams leverage DevSecOps and policy-as-code practices to build more secure software.
Don’t miss this opportunity to learn:

The evolving landscape of software supply chain security.
How to identify and mitigate risks in open source dependencies.
Practical strategies for integrating security into your DevSecOps workflow.
A live demo of vet, a new tool for securing software supply chains.
The impact of the work OpenSSF has been doing within the larger security community.

Mark your calendars and join the live stream!
This event is being hosted in the run up to SOSS Community Day, India, co-located with KubeCon + CloudNativeCon India 2024. Please remember to register for the event here.

Linux Foundation Member Summit
2024-11-19 - 2024-11-21
Attending: The OpenSSF will be at the Linux Foundation Member Summit (LFMS) this year! The LFMS is the annual gathering for Linux Foundation member organizations that fosters collaboration, innovation, and partnerships among the leading projects and organizations working to drive digital transformation with open source technologies.

SigstoreCon North America
2024-11-12
Attending: OpenSSF is attending the 2024 SigstoreCon North America on November 12! Sigstore is a new standard for signing, verifying, and protecting software. Sigstore ensures that your software is all that it claims to be for developers and end users. SigstoreCon is a one-day vendor neutral conference organized by the Sigstore community and focused on all things Sigstore. Join us in Detroit and accelerate how you secure your software supply chain.

SOSS Community Day Japan
2024-10-30
Hosting: Co-located with OSS Japan, OpenSSF is hosting another SOSS Community Day in Japan. Stay tuned for more details.

Open Source Summit Japan
2024-10-28 - 2024-10-29
Attending: Catch us in Japan at the OSS Japan! Open Source Summit Japan is the leading conference in Japan connecting the open source ecosystem under one roof, providing a forum for technologists and open source industry leaders to collaborate and share information, learn about the latest in open source technologies and find out how to gain a competitive advantage by using innovative open solutions.

SOSS Fusion Conference
2024-10-22 - 2024-10-23
Hosting: The OpenSSF is hosting the SOSS Fusion Conference this year. The Secure Open Source Software (SOSS) Fusion Conference is a premier event, from OpenSSF, where the brightest minds in software development and cybersecurity converge as one community committed to securing the open source software that we all depend on. SOSS Fusion will host in-depth technical conversations on innovative and industry leading ways to secure open source software, fostering a collaborative platform for cutting-edge solutions and security insights.

Grace Hopper
2024-10-08 - 2024-10-11
Attending: Join OpenSSF and our community at the Grace Hopper Celebration this October. Come to this event and feel empowered, encouraged and inspired. You will be hearing from experts talking about their career growth, technical upskilling, leadership, DEI, and more.

Keyfactor Meeting
2024-09-26
Attending: We’re attending the 2024 Keyfactor Community Tech Meetup in Stockholm this September.
This event is inviting engineers and security specialists from Stockholm, the Nordics and around the world. Prepare yourself for an immersive experience filled with engaging presentations, hands-on workshops, and demos.

Nordic Software Security Summit
2024-09-23 - 2024-09-24
Attending: OpenSSF is attending the Nordic Software Security Summit this fall! This is the new conference on application security, focusing on the new EU legislation for software.

SOSS Community Day Europe
2024-09-19 08:00 - 17:00 UTC | Austria Center Vienna, Bruno-Kreisky-Platz 1, 1220 Wien, Austria
Secure Open Source Software (SOSS) Community Days are an opportunity for Community Members from across the Security and Open Source ecosystem to get together and share ideas and progress on capabilities that make it easier to sustainably secure the development, maintenance, and consumption of the open source software (OSS) we all depend on. SOSS Community Days are held regionally, alongside the Open Source Summits and were formerly called OpenSSF Days. The change in name reflects the need to capture the broader interest in the security of open source software. What’s in the SOSS? Come to a Community Day to find out! Brought to you by OpenSSF.

Open Source Summit EU
2024-09-16 - 2024-09-18
Attending: Open Source Summit is the premier event for open source developers, technologists, and community leaders to collaborate, share information, solve problems, and gain knowledge, furthering open source innovation and ensuring a sustainable open source ecosystem. It is the gathering place for open-source code and community contributors.

SBOM-a-Rama Fall 2024
2024-09-11 - 2024-09-12
Attending: OpenSSF is attending SBOM-a-Rama! We are excited for you to join us September 11-12, 2024, at the Denver Athletic Club in Denver, CO. Day 1 is the SBOM-a-Rama as you know it, a day of presentations from across the global software community on SBOM-related topics and a chance to discuss important opportunities and issues. Day 2 features our first SBOM-Solutions Showcase, where suppliers of commercial and open-source SBOM solutions will have a chance to share how they are helping meet the needs of community.

DEF CON
2024-08-08 - 2024-08-11
Attending: Catch us this summer at DEF CON! DEF CON is one of the oldest continuously running hacker conventions around, and also one of the largest. DEF CON is generally held in the last week of July or first week of August in Las Vegas. DEF CON 31 will be held August 8th through August 11th, 2023. Many people arrive a day early, and many stay a day later.

Black Hat USA
2024-08-07 - 2024-08-08
Attending: The OpenSSF is attending the Black Hat USA this year. Black Hat USA is the world’s leading information security event, providing attendees with the very latest in research, development and trends. Black Hat USA 2024 opens with four days of technical Trainings followed by the two-day main conference featuring Briefings, Arsenal, Business Hall, and more.

Hosting: Tips, Tricks, and Techniques to Ace Supply Chain Security
2024-07-11 14:00 - 15:00 (Asia/Kolkata)
In this live stream, we will be hosting Saiyam Pathak who is a seasoned technology evangelist. He comes with a lot of experience in the CNCF, Docker, WASM, and other communities and has recently begun to focus on software supply chain security. Saiyam Pathak is the founder of Kubesimplify, focusing on simplifying cloud-native and Kubernetes technologies. Previously at Civo, Walmart Labs, Oracle, and HP, Saiyam has worked on many facets of Kubernetes, including machine learning platforms, scaling, multi-cloud, and managed Kubernetes services. He is a prolific speaker and is best known for helping a huge number of folks learn and practice Kubernetes and cloud native tech.
In this stream, Saiyam will focus on his journey with software supply chain security, and in particular how some OpenSSF projects have helped him along the way. He will also demonstrate some of his favourite tools.

What’s Next for Open Source?
2024-07-11
Speaking: Join us for the “What’s Next for Open Source?” event, which will feature interactive workshops organized into three tracks: OSPOs & Social Impact, OSS Community, and Digital Infrastructure. Participants will engage in discussions and hands-on activities to explore the future of open source and its impact on global cooperation.
We will be hosting a “Secure Open Source Software for Resilient Societies” workshop, featuring Omkhar Arasaratnam, General Manager for the OpenSSF, and Arun Gupta, OpenSSF Governing Board Chairperson, as part of the panel and speakers. This session will delve into the critical role of secure open source software in fostering resilient societies and will include discussions on hardening the open source supply chain and making open source sustainable.

OSPOs for Good 2024 Conference
2024-07-09 08:00 - 2024-07-10 17:00 UTC
Speaking: OpenSSF will be speaking at OSPOs for Good 2024 Conference this July. The OSPOs for Good symposium is set to be a multi-day conference held on 9th and 10th July 2024, with a richer global presence of diverse open source thinkers, with bigger ambitions and strides for championing OSPOs as a global network for good.

Hosting: SLSA, A Security Paradigm For Your Builds
2024-06-27 14:00 - 15:00 (Asia/Kolkata)
Join Teja Kummarikuntla from Harness as we discuss various levels of SLSA achievable. Teja will walk viewers through the basics of Software Supply Chain Security, viz. provenance, attestation, and other pipeline runs that provide artifact integrity. The talk will make use of several tools such as Cosign to accomplish this. Join us to learn how supply chain security can benefit your organization.
The conversation will be streamed here:

Hosting: Building A Culture Of Security
2024-06-14 14:00 - 15:00 (Asia/Kolkata)
In this interesting chat with Gowtham Sundar, who currently leads AppSec @ SPH Media, we discuss how organizations build a culture of security awareness among its employees. We delve into details about how individuals tasked with the challenge of rolling out security initiatives face unique challenges ― both technical and cultural ones.
Watch the stream live here:

Hosting: Confidential Computing ― A Refreshing Perspective
2024-05-30 14:00 - 15:00 (Asia/Kolkata)
Vaishali joins us for a stream where she brings the ideas of Confidential Computing to the fore in the backdrop of global events. Join us to learn about technology, geopolitics, and how these events intersect!

Hosting: Supply Chain Security ― Fundamentals and more...
2024-05-23 14:00 - 15:00 (Asia/Kolkata)
In this live stream, join Sangam Biradar as he explores the fundamental building blocks of Supply Chain Security. He will progressively showcase how to build more security into the code, build, and other phases of the SDLC.

SOSS Policy Summit Europe 2024
2024-05-14
Hosting: Join us in SOSS Policy Summit Europe this year as we set the stage for impactful security initiatives, policy efforts, and cross-collaboration among the OSS community, European governments, and private sector to the secure open source software that we all depend on.
This event is complimentary to attend, but has limited space. Please express your interest to attend and the Team will confirm registration details.
