Posts from The Open Source Security Foundation (OpenSSF) is a members | The fastest way for busy developers to keep up with technologies 🚀

Updates from The Open Source Security Foundation (OpenSSF) is a...

Posts
Description

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Rethinking Efficiency for Cloud-Native AI Workloads

AI isn’t just burning compute—it's torching old-school FinOps. Reserved Instances? Idle detection? Cute, but not built for GPU bottlenecks and model-heavy pipelines. What’s actually happening:Infra teams are ditching cost-first playbooks for something smarter—business-aligned orchestrationthat chas.. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Kubernetes VPA: Limitations, Best Practices, and the Future of Pod Rightsizing

Kubernetes'Vertical Pod Autoscaler (VPA)tries to be helpful by tweaking CPU and memory requests on the fly. Problem is, it needs to bounce your pods to do it. And if you're also runningHorizontal Pod Autoscaler (HPA)on the same metrics? Now they're fighting over control. VPA sees a narrow slice of .. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Dynamic Kubernetes request right sizing with Kubecost

Kubecost’s Amazon EKS add-on now handlesautomated container request right-sizing. That means teams can tweak CPU and memory requests based on actual usage—once or on a recurring schedule. Optimization profiles are customizable, and resizing can be baked into cluster setup using Helm. Yes, that mean.. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Why I Ditched Docker for Podman (And You Should Too)

Older container technologies like Docker have been prone to security vulnerabilities, such as CVE-2019-5736 and CVE-2022-0847, which allowed for potential host system compromise. Podman changes the game by eliminating the need for a persistent background service like the Docker daemon, enhancing sec.. read more

Story

@laura_garcia shared a post, 6 months, 2 weeks ago

Software Developer, RELIANOID

🌐 NIS2 is reshaping cybersecurity compliance across Europe.

At RELIANOID, we are fully aligned and compliant with NIS2 requirements, helping organizations strengthen their security posture. 👉 Explore more: https://www.relianoid.com/security-compliances/relianoid-nis2-compliance/ #NIS2#CyberSecurity#Compliance#Regulation#EUCompliance#InfoSec#DataProtection#Go..

Story

@ketbostoganashvili shared a post, 6 months, 2 weeks ago

Technical Content Writer

Send emails with Vercel and Mailtrap

#transac... #email m... #vibe co... #send em... #Nocode

Learn how to integrate Mailtrap with your Vercel-hosted applications to send transactional emails with reliable delivery and comprehensive analytics.

Story

@ketbostoganashvili shared a post, 6 months, 2 weeks ago

Technical Content Writer

Send emails with Bolt.new and Mailtrap

#transac... #email m... #send em... #vibe co... #Nocode

Learn how to integrate Mailtrap with your Bolt.new application to send transactional emails and manage contacts without writing complex code.

Link

@anjali shared a link, 6 months, 2 weeks ago

Customer Marketing Manager, Last9

APM for Kubernetes: Monitor Distributed Applications at Scale

Understand Kubernetes APM by linking request flows with pod, node, and cluster data to get complete visibility at scale.

Story

@laura_garcia shared a post, 6 months, 3 weeks ago

Software Developer, RELIANOID

🌊 Load Balancing Smart Wave with RELIANOID — Built for Marine Telemetry

The Smart Wave platform is key for real-time telemetry from offshore buoys, vessels, and coastal stations. But how do you ensure it performs reliably — even over satellite links? We've published a new technical guide showing how to load balance Smart Wave using RELIANOID: ✅ MQTT & TCP ingestion for ..

Knowledge base_how to load balance SMART WAVE_blue economy

Link

@faun shared a link, 6 months, 3 weeks ago

FAUN.dev()

Claude Code Ushers in a New Era of Agentic Programming

The rapid evolution of agentic coding is transforming software development, moving beyond traditional methods to intelligent, autonomous systems. Anthropic's Claude Code represents a significant leap in AI assistance for developers, shifting the paradigm from direct text manipulation to hands-off co.. read more

The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.

We believe organizations are best managed by their official representatives. Claim this page if you are the administrator of The Open Source Security Foundation (OpenSSF) is a.

Claim this page