Open Source in the Federal Government - Security, Supply Chain, and Contribution Strategies

Explore the critical role of open source software in federal government systems through this 38-minute conference talk from the Linux Foundation's Open Source Summit. Discover how the federal government, as potentially the world's largest consumer of open source software, manages hundreds of thousands of software systems that rely heavily on OSS while maintaining paramount security standards. Learn about the evolving landscape of open source guidance for government programs, including best practices for selecting, consuming, contributing to, and publishing open source software. Examine practical methods and tools for vetting open source projects, implementing secure software ingestion processes, and supporting projects through meaningful contributions. Understand the balance between capturing open source benefits while mitigating supply chain risks inherent in OSS adoption. Gain insights into current challenges and emerging solutions that government entities, contractors, and community members can implement to build a more secure and collaborative open source ecosystem for critical mission systems.