OpenSSF Courses

A Glimpse Into Open Source Software Vulnerability Disclosure Practices

2 reviews

Explore current challenges and solutions in open-source software vulnerability disclosure, examining security advisories, bug bounty reports, and maintainer perspectives for improved OSS security practices.

• YouTube
• 31 minutes
• On-Demand
• Free Video

The State of Git Security With SLSA and Gittuf

1 review

Explore Git security beyond forge platforms using gittuf for repository policies and SLSA for source provenance, including new read permissions and standardization efforts.

• YouTube
• 24 minutes
• On-Demand
• Free Video

SLSA: A Security Paradigm for Software Supply Chain Integrity

Explore SLSA levels, software supply chain security basics, and tools like Cosign to enhance artifact integrity and benefit your organization.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Proactive Supply Chain Security with GUAC

Explore GUAC, a tool for proactive software supply chain security. Learn about its features, recent release, roadmap, and how to contribute to this OpenSSF project.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Improving Posture of Critical OSS Projects with Security Audits

Explore effective security audits for open source projects, including top vulnerabilities, lessons learned, and common mistakes to avoid. Enhance your OSS security posture.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Community Engagement and Security Initiatives: Examples from Python and Rust

Explore Python and Rust Foundations' security initiatives, focusing on community engagement, consensus building, transparent communication, and addressing pushback for better open-source security practices.

• YouTube
• 23 minutes
• On-Demand
• Free Video

New Foundations of SBOM Are Underway at OpenSSF

Explore new OpenSSF projects addressing SBOM challenges, including protobom for data handling, sbomit for trust verification, and bomctl for basic operations. Learn about their impact on the SBOM ecosystem.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Securing the Software Supply Chain: An In-Depth Exploration of SLSA

Explore SLSA's impact on software supply chain security, covering fundamentals, trust, transparency, security levels, industry effects, and future trends.

• YouTube
• 59 minutes
• On-Demand
• Free Video

Exploring the Large Language Models Open-Source Security Landscape

Explore security risks of Large Language Models, analyze their open-source ecosystem, and learn mitigation strategies. Gain insights from a comparative study of popular LLM projects' security postures.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Trusted Publishing: Lessons from PyPI

Explore PyPI's trusted publishing scheme, its OpenID Connect-based authentication, and implementation details. Learn about security improvements and potential applications for other package indices.

• YouTube
• 24 minutes
• On-Demand
• Free Video

A Balancing Act: Collaboratively Developing Security in Open Source

Explore challenges and opportunities in developing open-source security, balancing collaborative practices with rigorous security measures across ecosystems and organizations.

• YouTube
• 20 minutes
• On-Demand
• Free Video

OSV and the Life of an Open Source Vulnerability

Explore OSV's role in simplifying open source vulnerability management throughout the software development lifecycle, from database creation to guided remediation.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Intel's Experiences Using OpenSSF Scorecard to Better Secure Software Portfolio

Explore Intel's use of OpenSSF Scorecard to assess and mitigate software risks across their vast portfolio, learning from their experiences and challenges.

• YouTube
• 26 minutes
• On-Demand
• Free Video

We Make Python Safer Than Ever

Explore efforts to enhance Python's security, including PyPI audits, improved practices, and community involvement. Learn about challenges, progress, and future plans for a safer ecosystem.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Learn Security with Me - Part 3

Explore cybersecurity fundamentals alongside OpenSSF's Community Manager in this interactive session, gaining practical insights and knowledge.

• YouTube
• 39 minutes
• On-Demand
• Free Video