Guest Blog – Open Source Security Foundation

📚 FREE Security Course: Learn to Develop Secure Software With LFD121 📚 ENROLL NOW

Nov 1, 2024

Red Hat’s Collaboration with the OpenSSF and OSV.dev Yields Results: Red Hat Security Data Now Available in the OSV Format

Oct 28, 2024

OpenSSF Adds Minder as a Sandbox Project to Simplify the Integration and Use of Open Source Security Tools

Sep 5, 2024

Simplify SBOM Management for Developers: Introducing Bomctl

Aug 5, 2024

New Guide for Package Repositories to Adopt Trusted Publishers

Jul 31, 2024

Neo Malware: Malicious Open Source Packages

Jul 31, 2024

How to Make Programming Language Package Repositories More Secure

Jul 3, 2024

Chainguard Enhances Security With OSV Advisory Feed

Jun 28, 2024

Improving OpenSSF Scorecard Scores: StepSecurity Automation for Four Key Checks

Jun 21, 2024

An Open Source Approach to Threat Mitigation in AWS

Jun 11, 2024

Ubuntu Security Notices Now Available in OSV

May 24, 2024

Introducing Artifact Attestations—Now in Public Beta

May 20, 2024

Enhancing Open Source Security: Introducing Siren by OpenSSF

May 17, 2024

Where Does Your Software (Really) Come From?

May 8, 2024

DruBOM: An SBOM for Drupal

Apr 24, 2024

Spotlight on the OpenSSF AI/ML Working Group

Apr 17, 2024

Beyond Scores with OpenSSF Scorecard: Granular Structured Results for Custom Policy Enforcement

Apr 4, 2024

Static Binary Analysis: A Final Exam for Software Supply Chain Protection

Feb 16, 2024

Scaling Up Supply Chain Security: Implementing Sigstore for Seamless Container Image Signing

Dec 20, 2023

OpenVEX and Open Source Vulnerability Scanners: How the Dynamic Duo Improves Vulnerability Management

Dec 5, 2023

Finding And Fixing Bugs in Open Source Software at Scale with a Grant from Alpha-Omega

Nov 9, 2023

How to Use Open Source to Help Comply with SCM Best Practices: A Tutorial on Combining OpenSSF Scorecard and Legitify

Oct 30, 2023

Safeguarding Your Data – How to Harden Your Systems

Oct 3, 2023

Running Sigstore as a Managed Service: A Tour of Sigstore’s Public Good Instance

Sep 18, 2023

Advancing Rustls and Rust for Linux with OpenSSF Support

Sep 7, 2023

VDR, VEX, OpenVEX and CSAF

Sep 6, 2023

Strengthening Open Source Software: Best Practices for Enhanced Security

Aug 18, 2023

The Rising Threat of Software Supply Chain Attacks: Managing Dependencies of Open Source Projects

Jul 28, 2023

Understanding and Applying the OpenSSF Criticality Score in Open Source Projects

Jul 21, 2023

Manage how you protect your assets at scale with SBOMs

Jul 20, 2023

Fuzz Introspector: optimizing fuzzing workflows

Jun 20, 2023

Why SBOM Generators Need to Accurately Represent Open Source Licenses

May 3, 2023

How I Got Involved with the OpenSSF

Apr 17, 2023

Distinguish between source and vendor

Apr 14, 2023

Assessing Product Risk Using SBOMs and OpenSSF Scorecard

Apr 6, 2023

SBOMs, So Far, So Good, So What?

Mar 28, 2023

The Role of Foundations in Securing OSS

Mar 20, 2023

Improving Supply Chain Security: IBM as a user and a contributor to Open Source Security Foundation Scorecard

Mar 15, 2023

New SLSA++ Survey Reveals Real-World Developer Approaches to Software Supply Chain Security

Mar 8, 2023

Why Open Source is Infrastructure, and Why it Matters

Mar 2, 2023

How to Make High-Quality SBOMs

Copyright © 2024 The Linux Foundation® . All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page. Linux is a registered trademark of Linus Torvalds. Privacy Policy and Terms of Use.