OpenSSF Courses

Navigating the Open Source Policy Labyrinth: Unraveling Global Policy Efforts for a Secure Future

Explore global policy initiatives shaping open-source software security, from US Executive Orders to EU regulations, while understanding how modern frameworks like SLSA and Software Self Attestation enhance digital infrastructure.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Enshittification Was a Choice - Understanding Internet Platform Consolidation

Explore how policy decisions led to internet platform monopolies and learn what changes are needed to build a better, more open digital future for everyone.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

QEMU-Native Hooking Bridge for Binary Fuzzing

Explore advanced binary fuzzing techniques through QEMU-Native Hooking Bridge, offering improved instruction hooking and memory control for efficient vulnerability detection in compiled code without source access.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

Why Is My Software on Fire? - Understanding Software Versioning and Supply Chain Security

Discover essential software versioning practices and supply chain management principles to enhance security and prevent hazards in open source development.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Scaling InnerSource Adoption in Regulated Industries - A Practical Guide

Discover practical strategies and insights for implementing InnerSource practices in regulated environments, focusing on regulatory compliance, cultural transformation, and infrastructure development.

• YouTube
• 12 minutes
• Self-Paced
• Free Video

Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software

Discover essential strategies for evaluating and securing open source software through maintenance assessment, vulnerability management, and community engagement practices for safer implementation.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

The Power of Confidential Computing - Exploring Open Source Projects

Explore how confidential computing revolutionizes data security through open-source projects, focusing on real-world applications from finance to human trafficking prevention and secure data processing.

• YouTube
• 12 minutes
• Self-Paced
• Free Video

Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts Using SLSA 0.1

Discover how to verify SLSA provenance in trusted build systems to enhance supply chain security and protect against modified sources, compromised builds, and package tampering.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

5 Things Open Source Software Can Do to Make Life Easier for the Public Sector

Discover practical strategies for open-source maintainers to enhance public sector adoption, focusing on key improvements that facilitate government and public service implementation.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

Setting the Standard - Safely Operationalizing OSS Contributions

Discover effective strategies for managing open source contributions in regulated environments while maintaining security and compliance standards for fintech organizations.

• YouTube
• 13 minutes
• Self-Paced
• Free Video

Stop Peeing in the Pool - The Impact of Non-Compliant Licenses on Open Source

Explore the challenges of modern open source licensing, examining how non-compliant "faux-pen" licenses threaten ecosystem sustainability and deviate from core open source principles.

• YouTube
• 15 minutes
• Self-Paced
• Free Video

Project Copacetic - Directly Patch Container Image Vulnerabilities

Discover how to efficiently patch container image vulnerabilities with Project Copacetic, streamlining security updates through automated scanning, direct patching, and seamless pipeline integration.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Fortify Your Code: Secure Your Supply Chain with Scorecard

Discover how to assess and strengthen open-source software security using Scorecard, gaining practical insights into dependency risk management and implementing robust supply chain protection measures.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Securing Software Repositories - EMEA Friendly

Explore best practices for securing software repositories, focusing on strategies tailored for EMEA regions to enhance overall project security.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Free Video

C/C++ Compiler Options Best Practices - March 29, 2023

Discover best practices for C/C++ compiler options to enhance code security and performance. Learn optimization techniques and defensive programming strategies.

• YouTube
• 58 minutes
• Self-Paced
• Free Video