OpenSSF

S2C2F SIG (April 11, 2023)

OpenSSF Identifying Security Threats WG (May 24 2023)

BEST Working Group’s SCM Guide collaboration (June 1, 2023)

Beyond "Just Update All the Things": Uncovering the Nuances of Dependency Se... Rex Pan & Holly Gong

Compiler Options Hardening for C and C++ - Georg Kunz, Ericsson

Securing Critical Projects WG Bi-Weekly (June 15, 2023)

AI/ML Security & OSS (June 14, 2023)

Scorecards Biweekly Sync (June 15, 2023)

EDU.SIG DEI Community Office Hours (May 18, 2023)

OpenSSF Vulnerability Disclosures (June 14, 2023)

Supply Chain Integrity WG (June 14, 2023)

Securing Software Repositories EMEA friendly (June 1, 2023)

Enduser – Refining Architecture & Threat Model (June 13, 2023)

OpenSSF Tech Talk: Proactive Supply Chain Security with GUAC

OpenSSF Day North America Event Report and Networking Session hosted by OpenSSF members in Japan

End Users Working Group (June 14, 2023)

OpenSSF TAC (June 13, 2023)

EDU.SIG DEI Community Office Hours (April 20, 2023)

Keynote Session: Closing Remarks - Omkhar Arasaratnam, General Manager, OpenSSF

Leveraging Sigstore Capabilities in a Local Environment - Chad Coleman, Lockheed Martin

Learn security with me Part 2 - by Cheuk Ting Ho

No Package is an Island: Looking at Context when Assessing Package Security - Elizabeth Wyss

EDU.SIG DEI Community Office Hours (June 15, 2023)

OpenSSF Diagrammers Society (June 15, 2023)

Open Source Security and the OpenSSF’s Best Practices WG - David Wheeler, Linux Foundation

Securing Software Repositories APAC friendly (September 7, 2022)

Fixing Container Security at the Source - Britney Blodget, Docker

OpenSSF Day at OSS NA - Education & Training for Secure Software Development & Distribution

Application Security is a Community Effort - Fernando Diaz, Senior Developer Advocate, GitLab

Securing Critical Projects WG Bi-Weekly (July 13 2023)

LFD121 Labs Addition - Enroll in Our Free LFD121 Course: "Developing Secure Software"

S2C2F SIG (April 11, 2023)

20240513 OpenSSF Meetup Japan

Secure Coding Guide for Python - David Mather & Bart Karas, Ericsson

Beyond Linux Kernel Testing: Approaches and Challenges - Shung-Hsi Yu, SUSE & Yunseong Kim, Debian

OSV and the Life of an Open Source Vulnerability - Andrew Pollock, Google

UEFI Secure Boot in Linux - Sumeet Pawnikar, Cisco

Making a Lockfile for Maven - Adam Kaplan, Red Hat

Lessons Learned From Code Scanning at Scale - Philippe Ombredanne, AboutCode

Developer Security Essentials - Liran Tal