Keynote: OpenSearch, Open Security: Bringing Transparency to Our Security Processes
Talkat Open Source Summit Europe 2023 · on Tuesday, 2023-09-19· at 10:15· Auditorium (Floor 2), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
OpenSearch publishes a GitHub vulnerability disclosure handbook that defines report-to-disclosure steps, runs an opt-in pre-disclosure partner list to notify integrators before public advisories, and surfaces internal public security reviews so feature gating happens visibly. The project commits to OpenSSF best practices to remediate medium-and-above aging vulnerabilities each release, has published its first CVEs, receives community reports, and an independent audit finds surprisingly few issues in the large codebase.
AI-written summary · about
chapters (6)
related talks
16mKeynote: There Is Just One Way to Do Open Source Security: Together
01h 08mPreparing for Zero-Day: Vulnerability Disclosure in Open Source Software
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
45mSimplifying Coordinating Vulnerabilities & Disclosures in Open Source...
11mLightning Talk: A Supply Chain Security View of OpenSearch
16mKeynote: Security in the Open - How Industry and Community Ben...
11mKeynote: Securing Open Source
22mKeynote: Securing the Open Source Ecosystem