🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Today, we unveil version 1.0 of the Top 🔟 Secure Software Development Guiding Principles! These principles set the stage for a more secure software landscape through a set of core practices. Read up and learn more through our latest blog post 👉openssf.org/blog/2023/12/0…

This was a privilege and Gregor Vand was a great host!

I’ll be at CNCF Kubeday Singapore! Come say hi and chat about open source, supply chain security, zero trust and more!!!

Over 22,000 unique GitHub projects are now using Sigstore to sign artifacts and attestations. With 52 million signatures logged post-GA, Sigstore is on a mission to bring verifiable, transparent integrity to every software supply chain. 🛡️ openssf.org/download-the-2… #OSSSecurity

#theCUBE recently heard from Intel’s @ArunGupta, who also sits on OpenSSF’s governance board, about its newest scorecard that ranks the security of Github repos and gives concrete suggestions for improvement. 📝Full coverage: siliconangle.com/2023/11/09/new… Kubecon_

📣Deal of the Day📣 Feb 8 SAVE 45% on Securing the Software Supply Chain & selected titles: mng.bz/WrEx Michael Lieberman Brandon Lum #SupplyChainSecurity Secure your entire #softwaresupplychain, including the code you write, libraries you use & the platforms you run on.

Congratulations to falcosecurity for graduating! 🥳🎓 As Chris Aniszczyk (@[email protected]) said: "#Falco is helping to push advancements in the open source #cloudnative runtime security space with #eBPF..." cncf.io/announcements/…

Collaborating with The White House, OpenSSF and @LF_Training are excited to announce an initiative for Women’s History Month. This initiative is a testament to our commitment to diversity, equity, and inclusion in the technology and cybersecurity fields. openssf.org/blog/2024/03/0…

Come get your signed copy of select chapters of the manning supply chain security book at the kusaridev booth during the booth crawl at 6pm! With Michael Lieberman and I!

Upcoming KubeCon + CloudNativeCon dates: 2025 🇬🇧 London, April 1-4 🇺🇸 Atlanta, November 10-13 2026 🇳🇱 Amsterdam, March 23-26 🇺🇸 LA, October 26-29

We're #hiring at the OpenSSF ! Our mission is to ensure the security of open source software for all. Are you a seasoned Technical Program Manager excited about #cybersecurity and #opensource who wants a full-time #remotejob? Apply: openssf.jobboard.io/jobs/314008394…

Learn how to integrate #DevSecOps into your #software supply chain to stay ahead of mounting global #threats. spiceworks.com/tech/devops/gu… Via Michael Lieberman, Co-Founder And CTO, Kusari

Fresh SLSA & GUAC starts with Knowing Your Ingredients at #ossummit Melissa McKay & Michael Lieberman

I'm a little bit worried about that the *Open Source* Summit this year contains several talks focusing on proprietary LLMs. I'm not saying that these talks had to be cancelled, but I feel they should be labeled as "Not following the Open Source Definition". cc The Linux Foundation

Learning how to better apply policy to my git repos with gittuf from Aditya Sirish and Billy Lynch

I know everyone wants to work on the cool thing or save/make a ton of money by throwing AI at a problem but it's extraordinarily dangerous. How many folks are verifying that the provenance and that the code/training data isn't malicious or vulnerable?

Join us this Thursday July 25 at 12pm ET virtually for a "How to get started in Open Source Software and Cybersecurity" during the #OpenSSF DEI Working Group Community Office Hours! openssf.org/getinvolved/

Today's TAG Security community meeting will feature a friendly debate between Justin Cappos (New York University) and Michael Lieberman. Justin is hot off a circuit of interviews with folks like ABC and CBS, and Michael is ready to present counterpoints! 1pm EDT— cncf.io/calendar/

TIL Con Edison doesn't validate that someone has authorization to request to stop service at an address. Someone was able to request that power be cut off to my house, have it back dated to April and not even have the right account number.

If you crave SLSA and GUAC, this is the place to be! If you crave salsa and guac, this is still the place to be! #KubeConParty ActiveState Michael Lieberman controlplane eventbrite.com/e/open-source-…