Join us

ContentUpdates from The Open Source Security Foundation (OpenSSF) is a...
Link
@devopslinks shared a link, 1 month, 2 weeks ago
FAUN.dev()

What I Really Mean When I Say “Good Communication” in Incident Response

In the world of incidents,communication is key. Tailor messages for different audiences: be clear for business stakeholders, factual for IT management, and detailed for fellow responders. Don't let vagueness derail incident response - keep stakeholders informed with precise updates and clear expecta.. read more  

What I Really Mean When I Say “Good Communication” in Incident Response
Link
@devopslinks shared a link, 1 month, 2 weeks ago
FAUN.dev()

Making a micro Linux distro

A dev dives into building a barebones Linux distro for RISC-V using QEMU. Starts at the metal: compiles the kernel, wires up a no-frills init process, packs it all into an initramfs. Then levels up, drops inu-rootto swap out raw shell scripts for Go-powered userland tools. Adds network. Now it’s a f.. read more  

Making a micro Linux distro
Link
@devopslinks shared a link, 1 month, 2 weeks ago
FAUN.dev()

Monitoring & Observability: Using Logs, Metrics, Traces, and Alerts to Understand System Failures

Railway just leveled up its observability game. Now logs, metrics, and alerts all live in one tidy dashboard - clean and connected. Structured logs flow straight from stdout/stderr. Metrics pulse in real time. Alerts plug into monitors or deployment webhooks so teams catch firesbeforethey rage... read more  

Monitoring & Observability: Using Logs, Metrics, Traces, and Alerts to Understand System Failures
Link
@devopslinks shared a link, 1 month, 2 weeks ago
FAUN.dev()

Year in Review: Lessons From 12 Projects Patreon Shipped in 2025

Patreon engineers made massive bets in 2025, shipping code across all areas of the system and enabling impactful features like Autopilot's growth tools suite. Expanding Autopilot's scope, reach, and effectiveness was a challenge, especially guaranteeing recipient redemption after email delivery in a.. read more  

News FAUN.dev() Team
@devopslinks shared an update, 1 month, 2 weeks ago
FAUN.dev()

Canonical Introduces Minimal Ubuntu Pro: Smaller Images and Secure Cloud Workloads at Scale

Ubuntu GNU/Linux

Canonical has launched Minimal Ubuntu Pro, enhancing cloud security with lightweight images and robust features. Available on AWS, Azure, and Google Cloud, it offers minimized attack surfaces and long-term support.

Canonical Introduces Minimal Ubuntu Pro: Smaller Images and Secure Cloud Workloads at Scale
News FAUN.dev() Team
@varbear shared an update, 1 month, 2 weeks ago
FAUN.dev()

AI's Dependence on Python Deepens as Anthropic Funds Core Ecosystem Work

Python

Anthropic invests $1.5 million in the Python Software Foundation to boost Python ecosystem security. The funding targets improvements in CPython and PyPI, including new tools for package review and malware datasets. It also supports the PSF's core activities and community initiatives.

AI's Dependence on Python Deepens as Anthropic Funds Core Ecosystem Work
News FAUN.dev() Team
@kala shared an update, 1 month, 2 weeks ago
FAUN.dev()

Anthropic’s New "Economic Primitives" Reveal Who Uses Claude, for What, and How Well It Works

Anthropic's new Economic Index report introduces five "economic primitives" to measure *how* Claude is used: task complexity, user and AI skill level, use case (work, coursework, personal), autonomy, and task success - built from privacy-preserving classification of anonymized Claude.ai and first-party API transcripts from **November 2025**.

Anthropic’s New "Economic Primitives" Reveal Who Uses Claude, for What, and How Well It Works
News FAUN.dev() Team
@varbear shared an update, 1 month, 2 weeks ago
FAUN.dev()

Tailwind CSS Lays Off 75% of Its Engineering Team as AI Cuts Documentation Traffic by 40%

tailwindcss Vercel

Tailwind CSS laid off roughly **75% of its engineering team** after a **~40% drop in documentation traffic** and an estimated **~80% decline in revenue**, even as usage of the framework continues to grow. According to its creator, AI-driven access to documentation has broken the link between adoption and sustainability.

News FAUN.dev() Team
@devopslinks shared an update, 1 month, 2 weeks ago
FAUN.dev()

Pulumi Expands IaC Platform to Support Terraform, OpenTofu, and Native HCL

Pulumi Terraform

Pulumi added support for managing Terraform and OpenTofu state in Pulumi Cloud and introduced native HCL support in its infrastructure as code engine. These changes allow teams to use Terraform, OpenTofu, Pulumi languages, and HCL side by side, with shared state visibility, governance features, and AI-assisted operations available across tools.

Story
@laura_garcia shared a post, 1 month, 3 weeks ago
Software Developer, RELIANOID

🔐 RELIANOID Load Balancer – Security Contributions

At RELIANOID, we actively and selflessly contribute to improving global cybersecurity, staying true to our open-source spirit. 🤝 We maintain close collaborations with security platforms, forums, and threat-intelligence communities, sharing our expertise to help strengthen protection across the Inter..

abuseipdb contributor relianoid
The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.