Open Source Security Foundation (OpenSSF) Together, we're securing the #opensource ecosystem #OSSSecurity https://xitter.cf/t.co/uUpbn44G4Q https://xitter.cf/t.co/adjLU8dbk0
Joined August 2020
- Tweets2.2K
- Following29
- Followers6K
- Likes509
Pinned Tweet
🎉 The 2025 OpenSSF Annual Report has officially arrived!!!
We invite you to celebrate another year of progress, creativity, and collaboration shaping a safer, more resilient open source community.
Download the report: openssf.org/download-the-202…
#AnnualReport #OSSSecurity
💎 How do software attestations support due diligence?
Eddie Knight explores how OpenSSF’s Gemara connects security policies, evaluations, enforcement, and audit evidence, with a practical look at CRA readiness.
Read more: hubs.la/Q04B_-8X0
Your Wednesday night #KubeCon plans? Sorted.
Join OpenSSF + Defense Unicorns at ZarfFest for drinks, bites, and open source community.
Nov. 11 | 6:30–9:30 p.m.
Le Méridien, Salt Lake City
Register: hubs.la/Q04BTggR0
OpenSSF just launched a new guide: Finding and Fixing Software Vulnerabilities Using AI, authored by David A. Wheeler. Learn how to prepare your setup, run AI effectively, and build deterministic safety nets for your code.
Read & access the guide: openssf.org/blog/2026/10/20/…
What happens when an AI agent can hide its tracks?
@cra of @CloudNativeFdn joins @SecurityCRob to talk agents, disappearing evidence, and why independent observability matters.
🎧 New What’s in the SOSS? hubs.la/Q04BMNfL0
From 1 ecosystem to 8. 🔐
GitHub expanded malware advisories using OpenSSF’s community-driven data, bringing broader coverage to developers with Dependabot malware alerts enabled.
See shared security infrastructure in action: hubs.la/Q04BrR290
Welcome Privateer to the OpenSSF Sandbox! 🎉
Privateer combines automated security checks with optional AI-assisted evidence review, flagging uncertain findings for human review.
Explore the project and get involved: hubs.la/Q04B4bft0
Our new report, “Strengthening Software Supply Chain Security with OpenChain and OpenSSF,” explores how OpenChain's governance processes and OpenSSF's secure engineering practices work together.
hubs.la/Q04zv64D0
🚀 The Fall Security Slam is live! Join the open source community October 5–November 6 to strengthen your project’s security, earn badges, and put OpenSSF best practices into action. All projects are welcome!
🎥 Learn how to get started with Eddie:
hubs.la/Q04zmpx10
🎙️ From upstream projects to downstream products, how do we manage open source risk as the regulatory landscape changes?
Vincent Danen joins What’s in the SOSS’ “Big Thoughts, Open Sources,” to explore that question in our latest episode.
hubs.la/Q04zj_F_0
🎉 Welcome A-Team Systems, Emphere, DACHS IT GMBH, and JetBrains to OpenSSF!
Live from #OpenSSFCommunity Day Europe in Prague, we’re sharing new members and CRA readiness resources to help strengthen open source security.
hubs.la/Q04z9Z_C0
🇨🇿 Heading to Prague for #OSSummit? Don’t miss Adrianne Marcum and Christopher Robinson (CRob) for “AI Everywhere, Trust Nowhere? Navigating Open Source Security, ‘AI Slop,’ and the New Attack Surface.”
Add it to your agenda: hubs.la/Q04z26q50
September Newsletter is here! 📰
September brings a commitment to sustainable package registries, practical CRA guidance, new community security work, and more.
Catch up on the latest OpenSSF updates: openssf.org/newsletter/2026/…
Angie Jones VP at the Agentic AI Foundation, joins What's in the SOSS talking about what it actually takes to run AI agents in production.
🎧 hubs.la/Q04yBSQl0
Let’s keep the conversation going! ⚡ Join the #OpenSSFCommunity at #AGNTCon + #MCPCon North America.
Explore the event and register here: hubs.la/Q04vr18l0
Heading to #KubeCon + #CloudNativeCon + Open Source #SecurityCon? Let’s connect at ZarfFest! 🎉
Join OpenSSF and Defense Unicorns for an evening of drinks, light bites, and great conversations with fellow builders, maintainers, and open source friends.
hubs.la/Q04yl-zj0
Open source participation creates business and career value.
Explore @IBM’s journey with @RedHat and #ProjectLightwell, plus Jamie Thomas’s insights in conversation with CRob.
What’s your strategy to give back?
hubs.la/Q04ykxGZ0
Securing the open source supply chain is also about growing the community! 🌍✨
Discover how our talented mentees teamed up with seasoned mentors to tackle critical security challenges across projects in the OpenSSF Summer Mentorship Showcase.
bit.ly/46JEsiY
Ready to level up your open source project’s security posture? 🛡️
OpenSSF & @CloudNativeFdn TAG Security launched Security Slam 2026 (Oct 5–Nov 6) for ALL OSS projects! Prepare for the EU CRA, access Slack advisors, and earn badges.
Read the blog: openssf.org/blog/2026/09/23/…
AI speeds up development. Can your security keep pace?
ActiveState CEO Abby Kearns joins What’s in the SOSS? to tackle AI velocity, CRA compliance, and dependency debt.
Know your dependencies. Hear her perspective. 🎧️
hubs.la/Q04y2NQh0
AI moves fast. Critical infrastructure needs support.
The OpenSSF Governing Board backs sustainable funding for public package registries: stronger security, reliable services, and continued free access for developers.
We’re in. Join us: hubs.la/Q04xDS7r0
