OSS Management & OSPO Ask Anything
summary
Defines OSPOs as functions managing open source and cites a research increase in reported effectiveness from 65% to 79% over one year. Lists practical outputs: the OSPA book, a public registry and six‑month audits, release checklists and issue templates, a template repo with CLA automation, and tools like repolinter and Scorecard plus the OpenSSF baseline at baseline.openssf.org. Describes a durable ownership program that inventorying and consolidating orgs reduced repo sprawl and says these measures measurably improve security, compliance, and upstream engagement.
AI-written summary · about
chapters (8)
- 0:00OSPO and To-Do Group intro
- 3:56OSPO evolution and resources
- 6:05Steering committee members
- 10:20Convincing management to start OSPO
- 16:44Enforcing open source compliance
- 27:58OSPO collaboration with teams
- 37:14Risk management vs innovation
- 43:57Closing remarks and OSPO book
related talks
26mLooking at Open Source Security from the Community Angle
40mTODO Steering Committee - Management & OSPO Ask Anything
46mOSPOs: Key Lever for Open Source Sustainability
30mDemystifying OSPOs
32mOSPOs: Key Lever for Open Source Sustainability
39mHow Can Your OSPO Maximize Open Source Business Value for the Organization?
45mAn OSPO for OSPOs: Managing Open Source at GitHub
26mNavigating Open Source: Establishing an OSPO for Organizational Success