Building Developer Confidence in Software Security with the DevRel Community
summary
OpenSSF surfaces concrete tools and entry points: the OpenSSF Security Scorecard (repo-level automated checks), the Best Practices Badge (checklist to earn a badge), Sigstore/Guac projects for supply-chain signing, and a free developer training catalog; Slack channels and a public calendar host working-group meetings to join. Claim: these are production-ready, no-cost resources that reduce risk if adopted; contributing buys influence over roadmap and avoids silently accepting supply‑chain risk.
AI-written summary · about
chapters (7)
- 0:00Introduction and speakers
- 5:45Why OpenSSF matters
- 11:36Security challenges in open source
- 19:01Navigating OpenSSF resources
- 27:04Getting involved and giving back
- 33:25Community and collaboration
- 39:51Q&A and closing
related talks
42mDeveloping a Secure, Open Future
57mFrontiers in Securing the Open Source Ecosystem
27mAn Open Book Test: Securing Open Source Software With OpenSSF’s Scorecard
53mImplementing the OpenSSF Best Practices Badges & Scorecards Into Your Project
14mKeynote: All Your Base Are Belong to Us
42mAssessing the Risk of Open-source Components Using OpenSSF's Scorecard
44mSecuring Open Source Software - End-to-End, at Massive Scale, Together
41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...