Open source security plan aims to deliver on development, patching and more

White House officials, The Linux Foundation, OpenSSF and 37 private sector tech companies have announced a 10-point open source and software supply chain mobilization plan and $150 million of funding over two years. At a summit meeting yesterday several participating organizations came together to collectively pledge an initial tranche of funding towards implementation of the plan. Those companies are Amazon, Ericsson, Google, Intel, Microsoft, and VMWare, pledging over $30M. This builds on the existing investments that OpenSSF community members make into open source software. An informal poll of stakeholders indicates they spend over $110M and employ nearly a hundred full-time… [Continue Reading]