… In a world where security is paramount, OSPOs serve as a lighthouse ensuring that organizations navigate the open source software supply chain with confidence. “Security is too big and too important for us to be working in a siloed fashion. …
… This training is in addition to role-specific training that employees with direct responsibility for supply chain management, for example, receive with respect to mitigating Human Rights risks within our supply chain. …
… Defining a software supply chain and addressing its security concerns is a complex undertaking, and Intel software security experts are actively engaged in this critical conversation. …
… Resources Enhancing Open Source Security: Introducing Siren by OpenSSF – Open Source Security Foundation Security at Every Step: Why Software Supply Chains Are Critical About the Guest John Kjell is responsible for open source at TestifySec, a software supply chain security startup. …
… Everyone’s talking about software supply chain security right now. It’s an important topic, and there are challenges unique to open source as a developer and as a user. What are the supply chain challenges can the OSPO help address? …
… It delivers a signed health report alongside the digital seal, which captures tampering events that could pose a security risk. …
… Q: Speaking of FUD, everyone's talking about software supply chain security, especially after the Log4j incident . …
… While LLMs are proving their utility across a wide range of generative AI GenAI applications, they can bring risks when it comes to reliability, variability, and security. …
… We'll worry about the security, and the ramifications later. But now what we have to consider is things like supply chain security, API security. All these other layers of security. …
… We work with the policy team to provide input on open source security in policy documents from NIST , CISA , or executive order, weighing in on how we think the government can help secure software supply chains. So we try to work with every player across the supply chain. …