Securing the Software Commons: Standards, Automation, and AI for a Resilie...
summary
Describes concrete progress: community standards like salsa framework and osv vulnerability schema enable machine‑readable vulnerability exports and a single API that aggregates about 150,000 OSS vulnerabilities; an automation goal to deliver an integrated security orchestration platform that wires OSS tools (OSS‑Fuzz, CodeQL, scorecards, osv scanner) into CI; AI augments fuzzing to boost code coverage by ~30% and assists vulnerability triage and patch synthesis; proposes language‑agnostic build/test schemas to enable verifiable reproducible builds.
AI-written summary · about
chapters (5)
- 0:00Securing open source
- 1:27Security standards foundation
- 4:42Automation to reduce toil
- 8:16AI in security revolution
- 12:15Recap and future vision
related talks
44mSecuring Open Source Software - End-to-End, at Massive Scale, Together
27mSecuring the Software Supply Chain: Integrating OpenSSF Scorecard, Jenkins, and the O...
21mNavigating the Intersection: AI’s Role in Shaping the Secure Open Source Software Ecos...
20mBuilding Secure Software OpenSSF Best Practices for Everyone!
44mOpen Source Security: The World Needs Our Help
44mNavigating Open Source and Open Standards for Better Cybersecurity
28mFOSS and Security Risk Management
42mDeveloping a Secure, Open Future