@openssf.org
Open Source Security Foundation (OpenSSF)
Together, we're securing the open source ecosystem
http://openssf.org
#OSSSecurity #OpenSSFCommunity
@openssf.orgOur new report, “Strengthening Software Supply Chain Security with OpenChain and OpenSSF,” explores how OpenChain's governance processes and OpenSSF's secure engineering practices work together.
@openssf.org🚀 The Fall Security Slam is live! Join the open source community October 5–November 6 to strengthen your project’s security, earn badges, and put OpenSSF best practices into action. All projects are welcome!
🎥 Learn how to get started with Eddie:
@openssf.org🎙️ From upstream projects to downstream products, how do we manage open source risk as the regulatory landscape changes?
Vincent Danen (Red Hat) joins What’s in the SOSS’ “Big Thoughts, Open Sources,” to explore that question in our latest episode.
@openssf.org🎉 Welcome A-Team Systems, Emphere, DACHS IT GMBH, and JetBrains to OpenSSF!
Live from #OpenSSFCommunity Day Europe in Prague, we’re sharing new members and CRA readiness resources to help strengthen open source security.
@openssf.org🇨🇿 Heading to Prague for #OSSummit? Don’t miss Adrianne Marcum and Christopher Robinson (CRob) for “AI Everywhere, Trust Nowhere? Navigating Open Source Security, ‘AI Slop,’ and the New Attack Surface.”
Add it to your agenda: sched.co/2Radz
@openssf.orgSeptember Newsletter is here! 📰
September brings a commitment to sustainable package registries, practical CRA guidance, new community security work, and more.
Catch up on the latest OpenSSF updates: https://openssf.org/newsletter/2026/09/30/openssf-newsletter-september-2026/
@openssf.orgAngie Jones, VP at the Agentic AI Foundation, joins What's in the SOSS talking about what it actually takes to run AI agents in production.
@openssf.orgHeading to #KubeCon + #CloudNativeCon + Open Source #SecurityCon? Let’s connect at ZarfFest! 🎉
Join OpenSSF and Defense Unicorns for an evening of drinks, light bites, and great conversations with fellow builders, maintainers, and open source friends.
@openssf.orgOpen source participation creates business and career value.
Explore IBM’s journey with RedHat and #ProjectLightwell, plus Jamie Thomas’s insights in conversation with CRob.
What’s your strategy to give back?
@openssf.orgSecuring the open source supply chain is also about growing the community! 🌍✨
In this recap of the OpenSSF Summer Mentorship Lightning Showcase, discover how our talented mentees teamed up with seasoned mentors to tackle critical security challenges across projects.
@openssf.orgReady to level up your open source project’s security posture? 🛡️
OpenSSF & CNCF TAG Security launched Security Slam 2026 (Oct 5–Nov 6) for ALL OSS projects! Prepare for the EU CRA, access Slack advisors, and earn badges.
Read the blog: openssf.org/blog/2026/09...
@openssf.orgAI speeds up development. Can your security keep pace?
ActiveState CEO Abby Kearns joins What’s in the SOSS? to tackle AI velocity, CRA compliance and dependency debt.
Know your dependencies. Hear her perspective. 🎧
Listen: openssf.org/podcast/2026...
@openssf.orgAI moves fast. Critical infrastructure needs support.
The OpenSSF Governing Board backs sustainable funding for public package registries: stronger security, reliable services, and continued free access for developers.
We’re in. Join us: openssf.org/blog/2026/09...
@openssf.org🌱 September 11 has passed. What’s next for CRA compliance?
Find your role and next steps with OpenSSF. Thanks to Roman Zhukov for inspiring our garden analogy and the Global Cyber Policy Working Group for helping it grow!
Find your path: openssf.org/blog/2026/09...
@openssf.orgMila from AWS breaks down how OS projects can maintain secure infrastructure without financial strain. Discover how Gradle and Compiler Explorer leverage the AWS Open Source Promotional Credit Program to harden the global software supply chain.
@openssf.orgThe September 11 CRA reporting milestone is here.
Our new community guide explains manufacturers’ reporting obligations and how open source maintainers and stewards can prepare for collaboration when vulnerabilities affect downstream products.
@openssf.orgWatch the on-demand video: www.youtube.com/watch?si=atc...
@openssf.orgSept 11 is here. Are you ready?
In our latest Tech Talk, experts walked us through practical steps for EU Cyber Resilience Act readiness, covering maintainer exemptions, manufacturer obligations, and new supply chain security baselines.
Read the recap: openssf.org/blog/2026/09...
@openssf.orgAI changes the speed of vulnerability discovery, not the fundamentals of software security.
Sal Kimmich and Simon John examine the UK GDS guidance, the case for “open by default,” and why durable enforcement must focus on real security practices.
@openssf.orgAI is reshaping software engineering and security, but its impact cuts both ways.
OpenSSF Board Chair Mark Russinovich, CTO, Deputy CISO and Technical Fellow at Microsoft Azure, joined us June 26 to discuss AI, supply chain security and vulnerability management.
