OpenSSF looks to further strengthen supply chain security

As we reported a few weeks ago, OpenSSF in conjunction with the White House and others has launched a 10-point plan and funding with the aim of improving the security of the software supply chain. OpenSSF has also announced a number of new members including premier members, Atlassian and Sonatype, who will join the OpenSSF governing board. The organization has been expanding its core working groups as well, to include Securing Software Repositories. This group aims to improve cybersecurity practices where developers download open source packages most often. 'There's not one small set of components whose improvement is going to… [Continue Reading]