@openssf
Account based inCanada
About this account
- Account based in
- Canada
- Connected via
- Web
Account-level information from X, not a live location or the device used for a specific post.
Open Source Security Foundation (OpenSSF) Together, we're securing the #opensource ecosystem #OSSSecurity https://nitter.cf/t.co/uUpbn44G4Q https://nitter.cf/t.co/adjLU8dbk0
Joined August 2020
- Tweets2.2K
- Following29
- Followers6K
- Likes509
Pinned Tweet
🎉 The 2025 OpenSSF Annual Report has officially arrived!!!
We invite you to celebrate another year of progress, creativity, and collaboration shaping a safer, more resilient open source community.
Download the report: openssf.org/download-the-202…
#AnnualReport #OSSSecurity
Heading to #KubeCon + #CloudNativeCon + Open Source #SecurityCon? Let’s connect at ZarfFest! 🎉
Join OpenSSF and Defense Unicorns for an evening of drinks, light bites, and great conversations with fellow builders, maintainers, and open source friends.
hubs.la/Q04yl-zj0
Open source participation creates business and career value.
Explore @IBM’s journey with @RedHat and #ProjectLightwell, plus Jamie Thomas’s insights in conversation with CRob.
What’s your strategy to give back?
hubs.la/Q04ykxGZ0
Securing the open source supply chain is also about growing the community! 🌍✨
Discover how our talented mentees teamed up with seasoned mentors to tackle critical security challenges across projects in the OpenSSF Summer Mentorship Showcase.
bit.ly/46JEsiY
Ready to level up your open source project’s security posture? 🛡️
OpenSSF & @CloudNativeFdn TAG Security launched Security Slam 2026 (Oct 5–Nov 6) for ALL OSS projects! Prepare for the EU CRA, access Slack advisors, and earn badges.
Read the blog: openssf.org/blog/2026/09/23/…
AI speeds up development. Can your security keep pace?
ActiveState CEO Abby Kearns joins What’s in the SOSS? to tackle AI velocity, CRA compliance, and dependency debt.
Know your dependencies. Hear her perspective. 🎧️
hubs.la/Q04y2NQh0
AI moves fast. Critical infrastructure needs support.
The OpenSSF Governing Board backs sustainable funding for public package registries: stronger security, reliable services, and continued free access for developers.
We’re in. Join us: hubs.la/Q04xDS7r0
🌱 September 11 has passed. What’s next for CRA compliance?
Find your role and next steps with OpenSSF. Thanks to Roman Zhukov for inspiring our garden analogy and the Global Cyber Policy Working Group for helping it grow!
Find your path: hubs.la/Q04xz3N90
Mila from @awscloud breaks down how OS projects can maintain secure infrastructure without financial strain. Discover how Gradle and Compiler Explorer leverage the AWS Open Source Promotional Credit Program to harden the global software supply chain.
openssf.org/blog/2026/09/14/…
The September 11 CRA reporting milestone is here.
Our new community guide explains manufacturers’ reporting obligations and how open source maintainers and stewards can prepare for collaboration when vulnerabilities affect downstream products.
hubs.la/Q04xggDY0
Sept 11 is here. Are you ready?
In our latest Tech Talk, experts walked us through practical steps for EU Cyber Resilience Act readiness, covering maintainer exemptions, manufacturer obligations, and new supply chain security baselines.
Read the recap: openssf.org/blog/2026/09/10/…
AI changes the speed of vulnerability discovery, not the fundamentals of software security.
Sal Kimmich and Simon John examine the UK GDS guidance, the case for “open by default,” and why durable enforcement must focus on real security practices.
hubs.la/Q04x6sPW0
AI is reshaping software engineering and security, but its impact cuts both ways.
OpenSSF Board Chair Mark Russinovich, CTO, Deputy CISO and Technical Fellow at Microsoft Azure, joined us June 26 to discuss.
hubs.la/Q04wYtKD0
From our Happy Hour Reception at The Cosmopolitan to deep dives into software supply chain security, AI findings, and the hallway track, OpenSSF was proud to advance open source security at Hacker Summer Camp 2026!
Read the full recap: openssf.org/blog/2026/09/04/…
The EU Cyber Resilience Act is reshaping responsibility across the software supply chain.
Madalin Neag breaks down what the CRA means for open source, software stewards, maintainers, and organizations preparing for compliance.
hubs.la/Q04w3M9j0
📰 The August Newsletter is here!
It is packed with exciting updates within the OpenSSF community, including how Ericsson solved CRA obligations with over 1,400 upstream fixes, and key strategies for securing agentic AI ahead of AGNTCon NA.
Read: openssf.org/newsletter/2026/…
We are excited to announce that #BOMHort (formerly SeeBOM) has officially joined the OpenSSF family as a Sandbox Project!!!
Read the full announcement on our blog to learn more about BOMHort: openssf.org/blog/2026/08/28/…
Get involved on this project: openssf.org/projects/bomhort…
How did one team improve security across the open source ecosystem?
Ericsson took on the EU Cyber Resilience Act (CRA) by eliminating private forks and going straight to the source.
hubs.la/Q04vJ_TZ0
How does a major telecom leader solve EU Cyber Resilience Act (CRA) compliance? By going 100% upstream.
Learn how Ericsson lowered long-term lifecycle costs while strengthening the global supply chain.
hubs.la/Q04vpFtc0