At Open Source Summit ⁦The Linux Foundation⁩ #OSSummit this week and today at @OpenSSF’s #SOSSCommunity day.

Would love to meet if you’re around.

Today is the day! webchick at Aiven 🦀 Katherine Druckman Tabatha and I take the #sosscommunity day stage Connecting Supply Chain Security Projects to the Community - Exploring OpenSSF’s DevRel Mission #ossummit

#Togoendanger , #SOSSCommunity
#droitinternational
#Libertédepress
Le dictateur Faure Essozimna GNASSINGBÉ
Se fait de nouveau voir, en arrêtant le Journaliste Thomas Dietriech au Togo le 15/04/2024.Nous disons #FreeThomasDietrich Now.
Trop c est Trop.

Tabletop Exercise (TTX) @ SOSS Community Day NA: #OSS security leaders discuss topics such as the typical steps an organization may take during an initial security alert disclosure when initiating a Cyber Incident Response process. 💬
#sosscommunity

Rebecca Rumbul from Rust Foundation and Deb Nicholson from Python Software Foundation (@ThePSF) discuss the importance of actions like building consensus, transparent communication, & responding to pushback in their organizations' approach to security. 🔐
#SOSSCommunity

5/13開催 OSSセキュリティMeetup ー #OpenSSF ゼネラルマネージャーOmkharを迎えて

今週開催 世界最大規模のOSSカンファレンス #OSSummit NA #SOSSCOMMUNITY イベントレポート

OmkharがXZ Utilsの脆弱性やOpenSSFが将来の問題の防止にどのように役立つかなど幅広く解説 : hubs.la/Q02sPy7N0

❓How to address the critical gap between code & communication❓

🤝 Catch our #opensource rockstar 🌟 Tabatha 🔜 SOSS & OSSNA 🌟on the panel @OSSummit talking OpenSSF & #SOSSCommunity !

📅 Mon, April 15, 2024 9:30a
📍 Room 1

The Linux Foundation
#devrel

sched.co/1aNLY

1/3 That’s a wrap! 👏 Thank you to everyone who attended the first SOSS Community Day today in beautiful Seattle. 🌟 A big thanks to our community superstars for their insightful talks, and to everyone who joined us to be part of this rewarding community gathering.
#SOSSCommunity

5/13 (月) OSSセキュリティMeetup
#OpenSSF ゼネラルマネージャーOmkharを迎えて

OmkharがXZ Utilsの脆弱性やOpenSSFが将来の問題の防止にどのように役立つかなど幅広く解説

世界最大規模のOSSカンファレンス #OSSummit NA #SOSSCOMMUNITY イベントレポート

登録 : hubs.la/Q02ty_W90

Good morning from #sosscommunity ! Opening keynote: “SBOMs Everywhere: Work in Progress & Challenges Ahead” with some great updates on #SBOM incl the final release tag of #SPDX 3.0! github.com/spdx/spdx-3-mo… #ossummit

Somehow the conversation has become - risk comes from open source dependencies instead of risk comes from all dependencies.

It’s easy to forget that risk profile of open source deps is transparent while that of proprietary deps and third party services is opaque. #SOSSCommunity

👏🏼👏🏼Amir talked about our efforts helping open source projects identify and fix vulnerabilities at no cost to maintainers! Couldn’t be more proud to work with the #sosscommunity !

This week, meet STF's Mirko Swillus live and in-person in Seattle at OpenSSF's #SOSSCommunity Day and The Linux Foundation's #OSSummit North America. Say hi, and find out what STF is working on to strengthen the FOSS ecosystem in the public interest!

We've split into two tracks during #sosscommunity ! Next up: 'Driving Security at Scale: Principles for Package Repository Security' -- the framework is available online repos.openssf.org/principles-for… #ossummit

I'm excited to moderate a discussion at SOSS Community Day NA '24 with Chan Voong, Jay White, Marcela Melara, PhD and John Kjell 🦉🛡️ on #DEI at OpenSSF sosscdna24.sched.com/event/93571997… #SOSSCommunity #OSSummit

Excited for next week's #ossummit in Seattle! Monday's plan: #sosscommunity and #chaosscon . Hallway track on Tuesday.

Open to coffee/lunch meet ups - let’s talk OSPOs, developer ecosystems, package managers, or music! 👋 New and existing connections welcome!

One fear: we try so hard to protect 3-letter agencies that we harm the open, collaborative nature of #OpenSource .

#xzbackdoor was only found *because* of this community.

#SOSSCommunity

Relativity recent shift: viewing #OpenSource like all other critical infrastructure.

Happening, but in its own time, and needs us to keep pushing.

#SOSSCommunity

Scorecard, All Stars are two OpenSSF projects to help with this general problem. Determine how secure your repository is.

#SOSSCommunity