OpenSSF

Open Source Security Foundation (OpenSSF)
Advancing open source security for all

Website: https://openssf.org
GitHub: https://github.com/ossf

Last Notes

2026-05-06 10:11:17 GMT

Open Infrastructure Is Not Free. Part II is here.
10 trillion open source package downloads in 2026. More than 1 billion per hour. Still running on donations and volunteers.
AI is accelerating consumption and attacks. Registry leaders have formed the Sustaining Package Registries WG to change that.
Read Part II: https://openssf.org/blog/2026/05/06/open-infrastructure-is-not-free-part-ii-the-hidden-cost-of-running-package-registries/
#PreserveOpenSource #FreeSoftwareIsntFree
https://cdn.masto.host/sociallfxdev/media_attachments/files/116/527/088/872/001/591/original/ad7e1576893b6cb2.jpg

2025-08-14 20:29:05 GMT

How do you prove your open source project is secure in minutes, not weeks?
#GUAC did it using #OpenSSF’s #OSPSBaseline + #LFX Insights.
Faster trust. Less friction. More time to build!
Read the full story: https://openssf.org/blog/2025/08/14/case-study-how-lfx-insights-and-osps-baseline-validated-guacs-security-in-under-an-hour/
https://cdn.masto.host/sociallfxdev/media_attachments/files/115/029/005/656/952/145/original/01ff9ddc15b8fde0.png

2025-08-05 22:31:14 GMT

With the closure of the CISA #SBOM Working Group, we're picking up the torch
Join us starting Monday, August 11 at 11am ET for an open, cross-industry discussion on SBOMs, continuing the momentum right here in our community.
Check out the OpenSSF Community Calendar for meeting details: https://openssf.org/getinvolved/
https://cdn.masto.host/sociallfxdev/media_attachments/files/114/978/520/111/609/097/original/fb9ca9fbb7eaca4a.png

2025-06-26 14:01:01 GMT

🎉 Today we celebrate #OpenSSFCommunity Day NA 2025, welcoming six new member organizations and honoring incredible contributors with the Golden Egg Awards 🥚.
Read the full update:
🌐 https://openssf.org/blog/2025/06/26/openssf-welcomes-new-members-and-presents-golden-egg-award
#OpenSSF #OpenSource #SoftwareSecurity #OSS
https://cdn.masto.host/sociallfxdev/media_attachments/files/114/749/930/057/062/694/original/ec1ba92365f01b9a.png

2025-01-31 14:41:15 GMT

🌍🔒 The Linux Foundation Europe and #OpenSSF communities are teaming up to help open source maintainers, manufacturers, and stewards navigate the EU Cyber Resilience Act (#CRA) and global cybersecurity regulations.
https://openssf.org/press-release/2025/01/31/linux-foundation-europe-and-openssf-launch-initiative-to-prepare-maintainers-manufacturers-and-open-source-stewards-for-global-cybersecurity-legislation/
https://cdn.masto.host/sociallfxdev/media_attachments/files/113/923/484/763/035/623/original/22a26413a4f65150.png

2024-12-10 04:12:07 GMT

🚨 Breaking: The OpenSSF welcomes Honda Motor Co., Ltd. and Guidewire Software, Inc. as new members!
From Delhi, we’re celebrating #SOSSCommunityDay India, advancing collaboration and innovation to secure open source software.
https://openssf.org/press-release/2024/12/09/in-the-face-of-mounting-regulatory-oversight-honda-and-guidewire-join-industry-leaders-securing-software-development-at-the-open-source-security-foundation-openssf/
#OpenSSF #OpenSourceSecurity
https://cdn.masto.host/sociallfxdev/media_attachments/files/113/625/752/489/782/413/original/bce985445eb2f650.png

2024-12-05 14:38:55 GMT

ICYMI: What’s in the SOSS? Podcast 20 🎙️
Before the Thanksgiving break, we released an insightful episode featuring Jack Cable of CISA and Zach Steindler of GitHub, diving deep into package repository security. 🚀
🎧 Tune in now: https://openssf.org/podcast/2024/11/26/whats-in-the-soss-podcast-20-jack-cable-of-cisa-and-zach-steindler-of-github-dig-into-package-repository-security/
#OpenSource
https://cdn.masto.host/sociallfxdev/media_attachments/files/113/600/723/670/821/753/original/6186cdc8610a0da2.png

2024-12-04 15:53:36 GMT

📢 The @npub1nsd…7jsu with Harvard's Laboratory for Innovation Science, has released Census III of Free and Open Source Software – Application Libraries. 🖥️ Key insights from OpenSSF help reduce FOSS vulnerabilities and secure supply chains. Read more: https://openssf.org/press-release/2024/12/04/open-source-usage-trends-and-security-challenges-revealed-in-new-study/
https://cdn.masto.host/sociallfxdev/media_attachments/files/113/595/356/538/127/122/original/83d5ec30dfb22e00.png

2024-12-03 17:16:44 GMT

Join us for a FREE webinar with insights from Census III on application-level FOSS usage & security on December 5!
📅 Don’t miss this opportunity to learn from top researchers and industry experts.
👉 Register now: https://www.linuxfoundation.org/webinars/census-iii-of-free-and-open-source-software-application-libraries?hsLang=en
https://cdn.masto.host/sociallfxdev/media_attachments/files/113/590/022/951/623/496/original/55e1eca8aff6264d.png

2024-11-19 19:17:51 GMT

📣 We are excited to announce that OpenSSF is an Ecosystem Partner of the new GitHub Secure Open Source Fund. 🎉
💪 We are proud to help improve open source security and to collaborate with other industry leaders to make an impact. Open source security is crucial and we are committed to creating a safer ecosystem for everyone.
Read the blog: https://github.blog/news-insights/company-news/announcing-github-secure-open-source-fund/
#OpenSSF #GitHub #GitHubSecure #SupplyChainSecurity #CyberSecurity #opensource