OpenSSF: Open Source Security Foundation

Re:OpenSSF: Open Source Security Foundation by hansjorg on Monday August 03, 2020 @04:46PM (#24043188)

Maybe this should link to https://openssf.org or the press release (https://openssf.org/press-release/2020/08/03/technology-and-...) rather than to the GitHub project?

Highlights from the FAQ:

> OpenSSF is focused on improving the security of open source software (OSS) by building a broader community with targeted initiatives and best practices. It will start with a focus on metrics, tooling, best practices, developer identity validation and vulnerability disclosures best practices.

> OpenSSF will be supported by Linux Foundation membership dues with targeted organization contributions to support initiatives

> The founding members are GitHub, Google, IBM, JPMorgan Chase, Microsoft, NCC Group, OWASP Foundation and Red Hat, among others.

[ Parent | on HN ]

Re:OpenSSF: Open Source Security Foundation by dependenttypes on Tuesday August 04, 2020 @04:59AM (#24048042)

I was interested in it but when I saw the corporations supporting it I ended up with a sour taste in my mouth. Reading the rest of the comments it seems more like as an organization with the intention to support their own interests rather than to support the interests of the community.

[ Parent | on HN ]

Re:OpenSSF: Open Source Security Foundation by cutemonster on Tuesday August 04, 2020 @03:03PM (#24053361)

Can't their interests be aligned with the oss developers?

Google has project zero and Safe Browsing API which does helpful things to me, GitHub auto scans dependencies, and owasp guidelines are helpful I think

[ Parent | on HN ]