OpenSSF Courses

Securing Open Source Supply Chains: Challenges and Solutions

Explore the importance of securing open source supply chains through automation, best practices, education, and collaboration in data centers and consumer applications.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain

Explore transparent digital signatures with Sigstore to enhance software supply chain security. Learn key techniques for protecting open source ecosystems.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Developer Security Essentials

Learn essential security practices for developers to protect open source software and strengthen supply chains.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Best Practices Make Perfect! How the OSSF is Improving Secure Development Education

Explore OpenSSF initiatives for improving open source security, including Scorecards, Best Practices badge, documentation, and secure software development training.

• YouTube
• 27 minutes
• On-Demand
• Free Video

How's Your Supply Chain with Your Insecure OSS Ingestion?

Explore secure open source software ingestion and supply chain management strategies for enhanced cybersecurity in modern applications and infrastructure.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Effective Vulnerability Management for Over 400 Projects at the Eclipse Foundation

Discover how Eclipse Foundation streamlines vulnerability management across 400+ projects, enhancing security practices and reporting processes for researchers and developers.

• YouTube
• 20 minutes
• On-Demand
• Free Video

What Makes a Project Critical? Discovering and Evaluating Popular Open Source Software

Discover criteria for evaluating critical open source projects and learn to assess their impact on infrastructure and society.

• YouTube
• 12 minutes
• On-Demand
• Free Video

SBOMs Everywhere - Work in Progress and Challenges Ahead

Explore the progress and challenges of Software Bill of Materials (SBOMs) implementation across industries with insights from a leading expert in dependable embedded systems.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Driving Security at Scale: Principles for Package Repository Security - Lecture

Explore principles for enhancing package repository security, including a four-level maturity model. Learn about CISA's collaboration with OpenSSF to improve open source ecosystem security at scale.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Leveraging Sigstore Capabilities in a Local Environment

Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Beyond "Just Update All the Things": Uncovering the Nuances of Dependency Security

Uncover complexities of dependency security, explore OSV project solutions, and learn strategies for integrating vulnerability management into developer workflows.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Compiler Options Hardening for C and C++

Explore compiler options to enhance C/C++ program security. Learn about memory-safety issues, mitigation techniques, and the OpenSSF Compiler Options Hardening Guide for informed decision-making.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Born of Hard Times - The Clean Dependency Project is Here to Help

Explore the Clean Dependency Project's proactive approach to OSS vulnerability management and learn how to contribute to this innovative open-source initiative.

• YouTube
• 14 minutes
• On-Demand
• Free Video

Sigstore: 2024 and Beyond

Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.

• YouTube
• 14 minutes
• On-Demand
• Free Video

Improving FOSS Security - Best Practices for Vulnerability Management

Discover best practices for FOSS projects to enhance security, from vulnerability prevention to effective response strategies. Learn to protect users through responsible security management.

• YouTube
• 18 minutes
• On-Demand
• Free Video