User:Llightex/Open Source Security Foundation
Industry forum on software security From Wikipedia, the free encyclopedia
The Open Source Security Foundation (OpenSSF) is a cross-industry forum for a collaborative effort to improve open-source software security.[2][3] Part of the Linux Foundation, the OpenSSF works on various technical and educational initiatives to improve the security of the open-source software ecosystem.[4]
 | |
| Abbreviation | OpenSSF |
|---|---|
| Predecessor | Core Infrastructure Initiative |
| Formation | 2020 |
| Type | Nonprofit |
| Purpose | Consolidating industry efforts to improve the security of open source software |
| Location | |
Region served | Worldwide |
Membership | 94[1] |
General Manager | Omkhar Arasaratnam |
Chief Technology Officer | Brian Behlendorf |
Parent organization | Linux Foundation |
The OpenSSF was formed in August 2020 as the successor to the Core Infrastructure Initiative, another Linux Foundation project.[5][6] The list of founding governing board members includes GitHub, Google, IBM, JPMorgan Chase, Microsoft, NCC Group, OWASP Foundation and Red Hat.[7] Other founding members include GitLab, HackerOne, Intel, Okta, Purdue, Uber, and VMware.[7]
In October 2021, Brian Behlendorf was announced as the OpenSSF's first full-time General Manager.[8] In May 2023, OpenSSF announced Omkhar Arasaratnam as its new General Manager, and Behlendorf became CTO of the organization.[9]
Working Groups and Projects
The OpenSSF houses various initiatives under its working groups.[10] The OpenSSF currently has eight working groups:[11]
- Best Practices for Open Source Developers
- Securing Software Repositories
- End Users
- Security Tooling
- Identifying Security Threats in Open Source Projects
- Supply Chain Integrity
- Securing Critical Projects
- Vulnerability Disclosures
The OpenSSF also houses two projects: the code signing and verification service Sigstore[12] and Alpha-Omega, a large-scale effort to improve software supply chain security.[13]
Policy
After the Log4Shell vulnerability, the White House held a meeting on software security with government and private sector stakeholders on January 13, 2022.[14] In May 2022, the OpenSSF hosted a follow-up meeting, the Open Source Software Security Summit II, where participants from industry agreed on a 10-point Open Source Software Security Mobilization Plan, which received $30 million in funding commitments.[15][16]
Wikiwand in your browser!
Seamless Wikipedia browsing. On steroids.
Every time you click a link to Wikipedia, Wiktionary or Wikiquote in your browser's search results, it will show the modern Wikiwand interface.
Wikiwand extension is a five stars, simple, with minimum permission required to keep your browsing private, safe and transparent.
