Open Source Security Foundation

Hosting: Building A Culture Of Security
2024-06-14 14:00 - 15:00 (Asia/Kolkata)
In this interesting chat with Gowtham Sundar, who currently leads AppSec @ SPH Media, we discuss how organizations build a culture of security awareness among its employees. We delve into details about how individuals tasked with the challenge of rolling out security initiatives face unique challenges ― both technical and cultural ones.
Watch the stream live here:

Hosting: Confidential Computing ― A Refreshing Perspective
2024-05-30 14:00 - 15:00 (Asia/Kolkata)
Vaishali joins us for a stream where she brings the ideas of Confidential Computing to the fore in the backdrop of global events. Join us to learn about technology, geopolitics, and how these events intersect!

Hosting: Supply Chain Security ― Fundamentals and more...
2024-05-23 14:00 - 15:00 (Asia/Kolkata)
In this live stream, join Sangam Biradar as he explores the fundamental building blocks of Supply Chain Security. He will progressively showcase how to build more security into the code, build, and other phases of the SDLC.

SOSS Policy Summit Europe 2024
2024-05-14
Hosting: Join us in SOSS Policy Summit Europe this year as we set the stage for impactful security initiatives, policy efforts, and cross-collaboration among the OSS community, European governments, and private sector to the secure open source software that we all depend on.
This event is complimentary to attend, but has limited space. Please express your interest to attend and the Team will confirm registration details.

RSA Conference
2024-05-06 - 2024-05-09
Speaking: OpenSSF is attending the RSA Conference this year in May. Omkhar Arasaratnam, the General Manager of OpenSSF, will be speaking at the event. The RSA Conference has been a driving force behind the world’s cybersecurity community for 32 years. And over that time, we’ve seen the need to expand our mission beyond yearly Conferences. Because cyberthreats are constantly evolving, and we as a community must continue to evolve, too.

Hosting: Tools & Techniques ― BOLT
2024-05-02 14:00 - 15:00 (Asia/Kolkata)
In this technical deep dive, Abhishek (founder of Koalalab) will showcase BOLT:. It is meant for transparent egress monitoring for build systems to harden the GitHub CI environment to enable protection against exfiltration of secrets and tampering of source-code. The idea is to teach how to bring security rigor to build pipelines using paradigms that typically help secure production systems.

Open Source Summit North America 2024
2024-04-16 - 2024-04-18
Sponsoring: We’re honored to sponsor the Open Source Summit NA this year. Open Source Summit is the premier event for open source developers, technologists, and community leaders to collaborate, share information, solve problems, and gain knowledge, furthering open source innovation and ensuring a sustainable open source ecosystem. It is the gathering place for open-source code and community contributors.

OpenSSF Scorecard New Contributor Workshop
2024-04-15 13:30 - 17:00 (America/Los_Angeles)
Hosting: The OpenSSF Scorecard New Contributor Workshop is an opportunity for hands-on onboarding with project maintainers with potential to submit first PR to OpenSSF Scorecard in real time. An overview of the project and architecture will be presented with breakouts based on participant interest.
How to Register: Pre-registration is required. To register for OpenSSF Scorecard New Contributor Workshop, add it to your Open Source Summit North America registration.

OpenSSF SLSA Workshop
2024-04-15 09:30 - 12:00 (America/Los_Angeles)
Hosting: OpenSSF SLSA Workshop
In this hands-on workshop, we will explain how organizations can leverage the Supply-chain Levels for Software Artifacts (SLSA) framework to harden the SDLC of code deployed in production.

To build a good understanding of how SLSA can be deployed at scale, we will take participants through a series of hands-on coding activities to secure a container developed on GitHub and deployment on Kubernetes. Our example will enforce two important properties: First, that all released images are integrity-protected against unauthorized parties. Second, that all deployed images are restricted to a set of cloud privileges, the same way we restrict privileges for OS processes.
We will then present how SLSA can be applied to harden AI models’ development and inference, the same way we do for traditional software like containers. We will take users through hands-on activities and demos to apply SLSA to AI models.
How to Register: Pre-registration is required. To register for OpenSSF SLSA Workshop, add it to your Open Source Summit North America registration.

SOSS Community Day NA 2024
2024-04-15
Hosting: We’re back at Open Source Summit North America (NA) with a co-location event: the Secure Open Source Software (SOSS) Community Day NA on April 15, 2024 in Seattle, Washington. SOSS Community Days are an opportunity for Community Members from across the Security and Open Source ecosystem to get together and share ideas and progress on capabilities that make it easier to sustainably secure the development, maintenance, and consumption of the open source software (OSS) we all depend on. SOSS Community Days are held regionally, alongside the Open Source Summits and were formerly called OpenSSF Days. The change in name reflects the need to capture the broader interest in the security of open source software. What’s in the SOSS? Come to a Community Day to find out!
The call for proposals (CFP) to speak is open through Friday, February 9, at 11:59 pm PST.

Hosting: Techniques & Tools ― PINNY
2024-04-11 14:00 - 15:00 (Asia/Kolkata)
In this special live stream, we will take a look at PINNY. It is designed as a simple tool for developers to hash-pin Dockerfiles and GitHub actions(two OSS dependencies which don’t have package managers but are instead directly downloaded from source) which protects from dependency hijacking & confusion. We will also be chatting about why securing CI/CD pipelines is important, which is opined to be an overlooked aspect of software supply chain security.
Our special guest will be Abhishek Anand, founder of Koalalab.

How To Secure Open Source Code?
2024-03-28 12:00 - 13:00 (Asia/Kolkata)
In this live stream, join us to learn how to secure open source software. It is a great way for you to learn about open source, secure coding practices, and *bonus* the benefits of being an OpenSSF member!

Let's Chat Open Source Security!
2024-03-27 14:00 - 15:00 (Asia/Kolkata)
Join us as part of the first (of many) India Initiative live streams!
In this live stream, we invite you to join in on a special conversation with Vandana Verma. Vandana is a security advocate and promotes secure coding practices. In this chat we will be talking about what developers lack in terms of security best practices and how best to fill that gap.

(Please note: Times specified are in IST)

VulnCon 2024
2024-03-25 - 2024-03-27
Sponsoring: The OpenSSF is excited to be sponsoring an after hours event at VulnCon 2024. This event provides a platform to showcase and educate on Information Security, data protection, and privacy. VulnCon’s aim is to facilitate collaboration among the private sector, Government bodies, investigation agencies, academia, and industry leaders for a safer cyber world. The conference features diverse technical, non-technical, legal, and community events.

KubeCon + CloudNativeCon EU
2024-03-19 - 2024-03-22
Speaking: OpenSSF will be speaking at KubeCon + CloudNativeCon EU this March! The conference gathers adopters and technologists from leading open source and cloud native communities in Paris, France from 19-22 March, 2024.

SXSW
2024-03-08 - 2024-03-16
Speaking: OpenSSF will be at South by Southwest (SXSW), speaking at panel: How AI Can Save Critical Infrastructure from Cyberattacks. This year, the Defense Advanced Research Projects Agency (DARPA) kicks off its AI Cyber Challenge, which aims not only to produce the next generation of cybersecurity tools using the latest AI technologies but also to show how we can use AI to defend code that powers critical infrastructure. Leveraging the proven DARPA challenge model as a forcing function to drive innovation, the AI Cyber Challenge invites potential competitors to vie for more than $20 million in prize money by identifying AI-enabled solutions to address some of the most critical vulnerabilities facing our nation’s infrastructure.

FS-ISAC Americas Spring Summit
2024-03-03 - 2024-03-06
Speaking: OpenSSF will be in San Diego this March with the FS-ISAC Americas Spring Summit. FS-ISAC is the member-driven, not-for-profit organization that advances cybersecurity and resilience in the global financial system, protecting financial institutions and the people they serve.

Speaking: FOSDEM 2024
2024-02-03 - 2024-02-04
We’re going to be at FOSDEM 2024. We will have a few talks in various Dev Rooms as well as a stand. Please connect with us if you are going to be in town!

EU Open Source Policy Summit 2024
2024-02-02
Speaking: Come join us at OpenForum Europe’s EU Open Source Policy Summit where OpenSSF General Manager will be on stage in a panel discussion on Open Source Software, Security, and Policy.

OpenSSF Day Japan - December 4 in Tokyo, Japan
2023-12-04
OpenSSF Day Japan brings together the open source community to discuss the challenges, big-picture solutions, ongoing work and successes in securing the open source software (OSS) supply chain. The full day program will feature keynotes from Open Source Security Foundation (OpenSSF) contributors and thought leaders. Sessions include presentation, panels, and fireside chats on subjects such as security best practices, vulnerability discovery, securing critical projects, and the future of OSS security.
CFP Closes: Friday, October 6 at 11:59 PM Tokyo Standard Time

Tech Talk - Securing the Software Supply Chain: An In-Depth Exploration of SLSA
2023-10-05 09:00 - 10:00 (America/Los_Angeles)
Join us for an OpenSSF Tech Talk on SLSA!
Delve into the exciting world of SLSA and its transformative impact on software supply chain security

Event Date: October 5th, 2023
Event Time: 9am PST
Cost: Free
Registration

Join us for a virtual tech talk delving into the world of SLSA and its transformative impact on software supply chain security. Get a comprehensive overview of SLSA and dig into SLSA fundamentals, trust and transparency in software artifacts, SLSA framework levels, the industry impact of SLSA, and more. You will have the unique opportunity to view a demo of SLSA and ask questions during the Q&A.

Topics:
Introduction to SLSA
Security Levels of SLSA
Trustworthiness and Transparency
Implementing SLSA
Industry Impact
Future Trends

Panelists:
Michael Lieberman, Kusari
Marcela Melara, Intel
Joshua Lock, Verizon
Loreli Cadapan, ActiveState

Moderator:
Omkhar Arasaratnam, OpenSSF

OpenSSF Day Europe - September 18 in Bilbao, Spain
2023-09-18
OpenSSF Day Europe brings together the open source community to discuss the challenges, big-picture solutions, ongoing work and successes in securing the open source software (OSS) supply chain. The full day program will feature keynotes from Open Source Security Foundation (OpenSSF) contributors and thought leaders. Sessions include presentation, panels, and fireside chats on subjects such as security best practices, vulnerability discovery, securing critical projects, and the future of OSS security.
CFP Closes: Friday, July 7 at 11:59 PDT

Inaugural OpenSSF Singapore Meetup
2023-06-08
Join us at the Inaugural OpenSSF Singapore Meetup!

Japan OSS Security Meetup - June 2 in Tokyo, Japan
2023-06-02 17:30 - 19:00 (Asia/Tokyo)
We are very excited to announce that our second OSS Security Meetup in Japan will be held at Cybozu Tokyo Office on June 2nd in Tokyo, hosted by Open Source Security Foundation (OpenSSF) Members. This time, the group will present a report on “OpenSSF Day North America,” 1-Day event to be held on the first day of the world’s largest OSS conference, Open Source Summit North America (May 10-12, Vancouver). Members from Japan will bring back event highlights and share information promptly.

OpenSSF Day North America - May 10 in Vancouver, BC
2023-05-10
OpenSSF Day North America brings together the open source community to discuss the challenges, big-picture solutions, ongoing work and successes in securing the open source software (OSS) supply chain. The full day program will feature keynotes from Open Source Security Foundation (OpenSSF) contributors and thought leaders. Sessions include presentation, panels, and fireside chats on subjects such as security best practices, vulnerability discovery, securing critical projects, and the future of OSS security.
