Posts from The Open Source Security Foundation (OpenSSF) is a members | The fastest way for busy developers to keep up with technologies 🚀

Updates from The Open Source Security Foundation (OpenSSF) is a...

Posts
Description

Activity

@secuodsoft started using tool Python , 1 week, 5 days ago.

Activity

@secuodsoft started using tool PHP , 1 week, 5 days ago.

Activity

@secuodsoft started using tool Node.js , 1 week, 5 days ago.

Activity

@secuodsoft started using tool MongoDB , 1 week, 5 days ago.

Activity

@secuodsoft started using tool Java , 1 week, 5 days ago.

Activity

@secuodsoft created an organization Secuodsoft , 1 week, 5 days ago.

Story

@laura_garcia shared a post, 1 week, 6 days ago

Software Developer, RELIANOID

𝗥𝗘𝗟𝗜𝗔𝗡𝗢𝗜𝗗 𝟴.𝟱 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗘𝗱𝗶𝘁𝗶𝗼𝗻 𝗶𝘀 𝗻𝗼𝘄 𝗮𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲!

- 𝗥𝗘𝗟𝗜𝗔𝗡𝗢𝗜𝗗 𝟴.𝟱 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗘𝗱𝗶𝘁𝗶𝗼𝗻 𝗶𝘀 𝗻𝗼𝘄 𝗮𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲! This release represents a major step forward in 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝘀𝘆𝘀𝘁𝗲𝗺 𝗶𝗻𝘁𝗲𝗴𝗿𝗶𝘁𝘆, 𝗮𝗻𝗱 𝗲𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗿𝗲𝗹𝗶𝗮𝗯𝗶𝗹𝗶𝘁𝘆. - 𝗨𝗘𝗙𝗜 𝗦𝗲𝗰𝘂𝗿𝗲 𝗕𝗼𝗼𝘁 𝘀𝘂𝗽𝗽𝗼𝗿𝘁 – cryptographic verification of the boot chain - 𝗗𝗲𝗯𝗶𝗮𝗻 𝗕𝗼𝗼𝗸𝘄𝗼𝗿𝗺 𝟭𝟮.𝟭𝟯 𝗯𝗮𝘀𝗲 + 𝗞𝗲𝗿𝗻𝗲𝗹 𝟲.𝟭.𝟭𝟱𝟵-𝟭-𝗻𝗼𝗶𝗱𝟬 - 𝗛𝗦𝗧𝗦..

relianoid_enterprise_edition_8.5_release

Story Trending

@viktoriiagolovtseva shared a post, 1 week, 6 days ago

A Git and Jira Integration Guide: How to Connect GitHub, GitLab, and Bitbucket to Jira Cloud

If you ask a developer, product manager, and QA “why integrate your Git repository with Jira,” they will all give different answers. Some like it for reducing context switching and providing automation options, while others value the transparency and improved traceability. But no matter who you ask, everyone is unanimous: this integration is immensely useful for the teams.

In this article, we focus on the most popular Git applications: GitHub, GitLab, and Bitbucket. We explain how to connect them to Jira Cloud and provide you with practical tips on making the most out of this integration. You will learn how to use smart commits, leverage automation, and gain extra value from third-party apps.

Story Trending

@ashwinisdave shared a post, 1 week, 6 days ago

Developer advocate, Middleware

From Metrics to Meaning: Building Context-Aware Dashboards That Actually Help Debug Production Issues

#DevOps #AI Dash... #observa... #log mon...

Most dashboards show what's happening but not why it matters. Learn how to build context-aware dashboards that actually help engineers debug production issues faster.

Activity

@maydali28 started using tool Terraform , 1 week, 6 days ago.

The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.

We believe organizations are best managed by their official representatives. Claim this page if you are the administrator of The Open Source Security Foundation (OpenSSF) is a.

Claim this page