Open Source Security

Member Spotlight: Trail of Bits – Driving Open Source Security Through Standards, Prototypes, and Policy

Blog Cybersecurity Open Source Security Open Source Tools OpenSSF PEP 740 Python Security Scorecard Secure Development Security Research sigstore Software Supply Chain Trail of Bits

OpenSSF Newsletter – May 2025

Newsletter community events cybersecurity framework Open Source Security OpenSSF Newsletter Software Supply Chain

Call for Proposals Now Open for Open Source SecurityCon 2025

We’re thrilled to announce that the Call for Proposals is now open for Open Source SecurityCon, a brand new event hosted by OpenSSF and CNCF, taking place on November 10, 2025, in Atlanta, Georgia.

Blog community events Event Open Source Security OpenSSF OpenSSF Community Day

What’s in the SOSS? Podcast #30 – S2E07 Scaling Security: Inside the GitHub Securing Open Source Software Fund

Podcast funding GitHub maintainers Open Source Security Podcast

OpenSSF Newsletter – April 2025

Welcome to the April 2025 edition of the OpenSSF Newsletter! Here’s a roundup of the latest developments, key events, and upcoming opportunities in the Open Source Security community. TL;DR This...

Newsletter community events EU Cyber Resilience Act Newsletter Open Source Security supply chain compliance

What’s in the SOSS? Podcast #27 – S2E04 Enterprise to Open Source: Steve Fernandez’s Journey to the OpenSSF

Podcast Enterprise Tech Open Source Security OpenSSF Podcast Steve Fernandez

Key Takeaways from VulnCon 2025: Insights from the OpenSSF Community

Blog Cyber Resilience Act Open Source Security OpenSSF VulnCon 2025 vulnerability management

What’s in the SOSS? Podcast #26 – S2E03 JavaScript’s Big Footprint: Robin Bender Ginn on Leading OpenJS and Open Source at Scale

Podcast JavaScript Open Source Security OpenJS Foundation Podcast Robin Bender Ginn whatsinthesoss

OpenSSF Policy Summit DC 2025 Recap

Blog Global Cyber Policy Open Source Policy Open Source Security OpenSSF

What’s in the SOSS? Podcast #24 – S2E01 OpenSSF MVVSR Overview

Podcast Arun Gupta MVVSR Open Source Security OpenSSF Podcast Zach Steindler