OpenSSF Courses and Certifications

OpenSSF

New Foundations of SBOM Are Underway at OpenSSF

Explore new OpenSSF projects addressing SBOM challenges, including protobom for data handling, sbomit for trust verification, and bomctl for basic operations. Learn about their impact on the SBOM ecosystem.

• YouTube
• 21 minutes
• On-Demand
• Free Video

OpenSSF

Deep Dive into the OpenSSF Mobilization Plan

Explore the OpenSSF Mobilization Plan for securing open source supply chains through automated tools, best practices, education, and collaboration.

• YouTube
• 35 minutes
• On-Demand
• Free Video

OpenSSF

What is the OpenSSF? - An Introduction to the Open Source Security Foundation

Explore the OpenSSF's mission, structure, and initiatives to enhance open source software security with insights from Executive Director Brian Behlendorf.

• YouTube
• 10 minutes
• On-Demand
• Free Video

OpenSSF

What is OpenSSF? - Securing Open Source Software Supply Chains

Explore OpenSSF's mission to secure open source supply chains through automated tools, best practices, education, and collaboration.

• YouTube
• 17 minutes
• On-Demand
• Free Video

OpenSSF

Introduction to the OpenSSF: Securing the Open Source Software Ecosystem

Discover the OpenSSF's mission to secure open source software, exploring key projects and initiatives designed to identify, fix, and prevent vulnerabilities in the open source ecosystem.

• YouTube
• 43 minutes
• On-Demand
• Free Video

OpenSSF

Bridging Policy and Communities - OpenSSF Involvement in EU Cyber Policy

Discover how OpenSSF bridges global cybersecurity policy and open source communities, focusing on EU cyber policy engagement and international collaboration for resilient digital ecosystems.

• YouTube
• 15 minutes
• On-Demand
• Free Video

OpenSSF

OpenSSF Bug Squashing Allies - Collaborative Vulnerability Remediation for Software Supply Chain Security

Discover how organizations can collaborate to fix security vulnerabilities in open source projects through the OpenSSF Bug Squashing Allies initiative and strengthen software supply chains.

• YouTube
• 18 minutes
• On-Demand
• Free Video

OpenSSF

Cloud Native at 10 - What's Next for CNCF, OpenSSF, and Open Source

Explore the evolution of cloud native technology over 10 years and discover key CNCF and OpenSSF initiatives addressing AI, security, and sustainability challenges ahead.

• YouTube
• 21 minutes
• On-Demand
• Free Video

OpenSSF

OpenSSF Community Enhancement in Japan

Discover how OpenSSF Japan Chapter promotes open-source security through meetups, best practice translations, SLSA workshops, and community feedback to enhance Japanese cybersecurity awareness.

• YouTube
• 15 minutes
• On-Demand
• Free Video

OpenSSF

Securing Content Distribution with RSTUF, an Incubating OpenSSF Project

Explore RSTUF, an OpenSSF project for securing content distribution. Learn about its implementation, adoption by PyPI and RubyGens, and use in private repositories and Archivista for in-toto attestation storage.

• YouTube
• 22 minutes
• On-Demand
• Free Video

OpenSSF

Turn Down That Noise - Why the OpenSSF Security Baseline Is Good for Maintainers

Discover how OpenSSF's Security Baseline helps open source maintainers navigate global regulations like EU's CRA and US NIST SSDF while reducing compliance noise from downstream users.

• YouTube
• 29 minutes
• On-Demand
• Free Video

OpenSSF

We're All Consumers - OpenSSF Baseline for Open Source Security and Compliance

Explore how OpenSSF Baseline simplifies security compliance for open source projects, creating nutrition labels that benefit both maintainers and consumers.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Turn Down That Noise - Why the OpenSSF Security Baseline Is Good for Maintainers

Discover how OpenSSF Security Baseline helps open source maintainers navigate global regulations like EU's CRA and US NIST SSDF while reducing compliance noise from downstream users.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Assessing the Risk of Open-source Components Using OpenSSF's Scorecard

Learn to evaluate open-source components' security using OpenSSF's Scorecard, enhancing your ability to assess and mitigate risks in software development.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Improving OSS Security Through Collaboration

Explore Microsoft's approach to open source security, focusing on collaborative efforts with OpenSSF and SCITT to enhance software supply chain integrity and transparency.

• YouTube
• 15 minutes
• On-Demand
• Free Video