Open Source Security Foundation: Difference between revisions

Revision as of 01:30, 17 November 2023

Revision as of 19:35, 18 November 2023

Line 37:

===Working Groups and Projects===

The OpenSSF houses various initiatives under its 8 current working groups.<ref>{{Cite web |last=Zorz |first=Mirko |date=2023-05-18 |title=Enhancing open source security: Insights from the OpenSSF on addressing key challenges |url=https://www.helpnetsecurity.com/2023/05/18/brian-behlendorf-openssf-open-source-security/ |access-date=2023-05-22 |website=Help Net Security |language=en-US}}</ref><ref>{{Cite web |title=OpenSSF Working Groups |url=https://openssf.org/community/openssf-working-groups/ |access-date=2023-05-22 |website=Open Source Security Foundation |language=en-US}}</ref> The OpenSSF also houses two projects: the code signing and verification service [[Sigstore]]<ref>{{Cite web |last=Vizard |first=Mike |date=2022-10-27 |title=Sigstore Code Signing Service Becomes Generally Available |url=https://devops.com/sigstore-code-signing-service-becomes-generally-available/ |access-date=2023-05-22 |website=DevOps.com |language=en-US}}</ref> and Alpha-Omega, a large-scale effort to improve software supply chain security.<ref>{{Cite web |last=Vaughan-Nichols |first=Steven J. |date=2022-10-06 |title=Alpha-Omega Dishes out Cash to Secure Open Source Projects |url=https://thenewstack.io/alpha-omega-dishes-out-cash-to-secure-open-source-projects/ |access-date=2023-05-22 |website=The New Stack |language=en-US}}</ref>

===Policy===