OpenSSF Tech Talks are educational, community-centric technical webinars deep-diving into the projects and initiatives that safeguard the open source ecosystem. Our primary mission is to foster, connect, and grow a collaborative, security-focused community.
In true open source spirit, these sessions are entirely vendor-neutral and community-driven, focusing on shared learning, technical innovation, and collaborative problem-solving.
In this session, we will explore how the OpenSSF AI/ML Security Working Group is developing open guidance and frameworks to help secure AI and machine learning systems, and how that work translates into real-world practice.
This Tech Talk will introduce Zarf, an OpenSSF project that simplifies software delivery in airgapped and semi-connected environments. You will see how Zarf’s declarative packaging strategy keeps Kubernetes and cloud-native workloads running smoothly even without internet access.
Join us for a 50-minute Tech Talk exploring how open source projects and contributors are helping build trust into the AI/ML supply chain, through model signing, reproducibility, metadata, and secure development practices.
What does the EU’s Cyber Resilience Act mean for open source, and how can your project stay ahead?
Discover practical ways to use the OSPS Baseline to strengthen security, improve compliance, and support open source resilience.
This Tech Talk is designed for aspiring open source professionals and newcomers eager to step into the field of open source software security.
In this Tech Talk, you will meet the GUAC maintainers as they cover the project and its recent release, roadmap plans, and how you can contribute. Cybersecurity threats are constantly and quickly changing, but GUAC can help you stay ahead.
Discover the essence of the OpenSSF Scorecard and its pivotal role in fortifying the open source landscape. Gain invaluable insights from organizations at the forefront of implementing Scorecard as they share their experiences and best practices.
Delve into the exciting world of SLSA and its transformative impact on software supply chain security.
