OpenSSF Courses

Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain

Explore transparent digital signatures with Sigstore to enhance software supply chain security and learn practical implementation strategies.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Open Source Security and OpenSSF's Best Practices Working Group

Explore open source software security principles and OpenSSF's best practices, including supply chain security and steps to address challenges.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Securing Software Repositories - EMEA Friendly

Explore best practices for securing software repositories, focusing on strategies tailored for EMEA regions and addressing global cybersecurity challenges.

• YouTube
• 2 hours 10 minutes
• Self-Paced
• Free Video

Securing Software Repositories - EMEA Friendly

Explore strategies for securing software repositories, focusing on best practices and tools to protect against vulnerabilities and ensure code integrity.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

OSS-SIRT - Identify Core Services 2

Explore essential core services for open source security incident response teams, enhancing your ability to manage and mitigate security threats effectively.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Free Video

Securing Software Repositories - EMEA Friendly

Explore strategies for securing software repositories, focusing on best practices and tools to protect against vulnerabilities and ensure code integrity.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Securing Software Repositories - APAC Friendly

Explore strategies for securing software repositories, focusing on best practices and tools to protect against vulnerabilities and ensure code integrity.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

SBOM Everywhere - Understanding Software Bill of Materials

Explore the importance of Software Bill of Materials (SBOM) in securing open source supply chains and learn about its widespread implementation.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Deep Dive into the OpenSSF Mobilization Plan

Explore the OpenSSF Mobilization Plan for securing open source supply chains through automated tools, best practices, education, and collaboration.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Securing Open Source Supply Chains: Challenges and Solutions

Explore the importance of securing open source supply chains through automation, best practices, education, and collaboration in data centers and consumer applications.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain

Explore transparent digital signatures with Sigstore to enhance software supply chain security. Learn key techniques for protecting open source ecosystems.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Developer Security Essentials

Learn essential security practices for developers to protect open source software and strengthen supply chains.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Best Practices Make Perfect! How the OSSF is Improving Secure Development Education

Explore OpenSSF initiatives for improving open source security, including Scorecards, Best Practices badge, documentation, and secure software development training.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

How's Your Supply Chain with Your Insecure OSS Ingestion?

Explore secure open source software ingestion and supply chain management strategies for enhanced cybersecurity in modern applications and infrastructure.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Effective Vulnerability Management for Over 400 Projects at the Eclipse Foundation

Discover how Eclipse Foundation streamlines vulnerability management across 400+ projects, enhancing security practices and reporting processes for researchers and developers.

• YouTube
• 20 minutes
• Self-Paced
• Free Video