OSPS Baseline - Improving Your Project Security the Easy Way

Learn how to enhance your open source project's security posture using the Open Source Project Security (OSPS) Baseline in this 25-minute conference talk from CNCF. Discover practical, actionable guidance for implementing security policies appropriate to your project's size and scope, addressing the common challenge developers face when security improvements seem like unfunded mandates. Explore how the OSPS Baseline differs from similar initiatives like OpenSSF Scorecard and understand why adopting these security practices benefits both maintainers and users throughout the ecosystem. Gain insights into how the OSPS Baseline can help streamline compliance requirements, particularly for maintainers dealing with obligations such as the Cyber Resilience Act (CRA), while making security improvements accessible and manageable for projects of all sizes.