Looking at Open Source Security from the Community Angle
summary
Claim: 96% of orgs with an OSPO advise on security. The OSPO acts as a connector between corporate units and maintainers, driving concrete actions: choose automation and SCA tooling, produce SBOMs, run OpenSSF Scorecard checks, and coordinate employee contributions or funding to reduce maintainer overload. Projects include an OSPO book with 20+ contributors and a community-of-practice that pilots policies and tooling; surveys and case collections feed lessons back into implementation.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:45Anas background
- 2:15Open Source vs Security
- 3:45Open Source Components
- 5:26How to Secure Open Source
- 5:51How is Open Source Affecting
- 6:54Open Source Connectors
- 8:53False Vulnerability Lifecycle
- 11:08Automation
- 12:43Sustainability
- 15:34Open Source Jobs
- 18:24Questions
related talks
46mOSS Management & OSPO Ask Anything
40mTODO Steering Committee - Management & OSPO Ask Anything
25mThe State of OSPOs and OSS Management 2025 Research Findings by TODO Group
26mNavigating Open Source: Establishing an OSPO for Organizational Success
32mOSPOs: Key Lever for Open Source Sustainability
34mSupply Chain Security, SBOMs and How OSPOs Can Play An Important Role Going Forward - An Ecosystem and Compliance Update
37mOSPO is a Key Element for your Company, but also for the OS Ecosystem
30mDemystifying OSPOs