Join us

ContentUpdates from The Open Source Security Foundation (OpenSSF) is a...
News FAUN.dev() Team
@varbear shared an update, 1 month ago
FAUN.dev()

Tor Goes Rust: Introducing Arti, a New Foundation for the Future of Tor

Arti Rust Tor

The development of "Arti," a Rust-based Tor implementation funded by Zcash, aims to enhance security and efficiency by addressing the limitations of the current C-based Tor.

Tor Goes Rust: Introducing Arti, a New Foundation for the Future of Tor
 Activity
@varbear added a new tool Arti , 1 month ago.
 Activity
@varbear added a new tool Tor , 1 month ago.
News FAUN.dev() Team
@kala shared an update, 1 month ago
FAUN.dev()

Gemini Deep Research Is Now Programmable Through a New API

Gemini 3 Vertex AI

The enhanced Gemini Deep Research agent is now available via API, enabling developers to integrate advanced research capabilities into applications, with the open-sourcing of DeepSearchQA for evaluating complex tasks.

Gemini Deep Research Is Now Programmable Through a New API
 Activity
@kala added a new tool Vertex AI , 1 month ago.
 Activity
@kala added a new tool Gemini 3 , 1 month ago.
News FAUN.dev() Team Trending
@kala shared an update, 1 month ago
FAUN.dev()

GitHub Copilot Adds GPT-5.2 With Long-Context and UI Generation

GitHub Copilot GPT-5.2

OpenAI unveils GPT-5.2 for GitHub Copilot, enhancing software engineering with improved long-context reasoning and UI generation, integrated with Microsoft Azure and NVIDIA.

GitHub Copilot Adds GPT-5.2 With Long-Context and UI Generation
News FAUN.dev() Team
@kala shared an update, 1 month ago
FAUN.dev()

GPT-5.2 Quietly Beats Human Experts at Knowledge Work

Azure GPT-5.2

OpenAI releases GPT-5.2, enhancing professional tasks with improved speed and cost-effectiveness, now available for paid users in ChatGPT and via API.

OpenAI unveils GPT-5.2, the most advanced frontier model for professional work and long-running agents
 Activity
@kala added a new tool GPT-5.2 , 1 month ago.
Story
@laura_garcia shared a post, 1 month ago
Software Developer, RELIANOID

RELIANOID at CII Delhi International Technology Summit 2025

16–17 December 2025 - New Delhi, India Our team continues a packed December schedule, and we’re excited to add another key event: the CII Delhi International Technology Summit 2025. Focused on “Accelerating the Techade”, this summit brings together industry, government, and research leaders to shape..

CII Delhi International Technology Summit relianoid
The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.