Action and Impact Panel: How OpenSSF and Industry Improve Open Source Security
summary
OpenSSF coordinates concrete work: adoption of Sigstore for signing, launch of the OSV API to normalize vulnerability data, and an emergency response SIG to map incident roles. Industry reports 53,000 developers at one bank and half a million packages in use, driving investments in SBOM tooling, DORA-aligned metrics, and AI-assisted noise reduction for scanners. Proposals include public services for signing and vuln feeds, and research into AI models that suggest remediation rather than just flagging issues.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:35Closing Panel
- 8:09Cyber Security Framework
- 15:26The Dependency Graph for Kubernetes
- 36:52Chaos Engineering
related talks
57mFrontiers in Securing the Open Source Ecosystem
33mHow & Why Does The Work of OpenSSF Impact You
44mSecuring Open Source Software - End-to-End, at Massive Scale, Together
37mOpenSSF Best Practices for Everyone!
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
22mKeynote: Securing the Open Source Ecosystem
42mDeveloping a Secure, Open Future
44mNavigating Open Source and Open Standards for Better Cybersecurity