Keynote: Security in the Open - How Industry and Community Ben...
summary
Okta details building OpenFGA (a CNCF Sandbox now in incubation) as an Apache 2.0 permission engine that feeds directly into the commercial Okta FGA product, showing concrete wins: weekly triage of container and dependency vulnerabilities, use of OpenSSF scorecard to track regressions (A→B example), community contributions adding image updates and SBOM signing/verification, and multiple security-slam awards—arguing companies that give paid time to OSS gain measurable product quality and security velocity.
AI-written summary · about
chapters (9)
- 0:00Security in open source intro
- 1:05Need more contributors
- 2:29Companies must support OSS
- 3:31Benefits of open source for companies and individuals
- 4:35CNCF communities for security
- 7:00OpenFGA success story
- 9:49Security-first culture at OpenFGA
- 12:36Rewarding security contributions
- 14:41Get involved in CNCF/OSS
related talks
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
14mKeynote: All Your Base Are Belong to Us
15mKeynote: Improving OSS Security Through Collaboration
05mKeynote: OpenSearch, Open Security: Bringing Transparency to Our Security Processes
13mKeynote: Setting the Standard - Safely Operationalizing OSS Contributions
22mKeynote: Securing the Open Source Ecosystem
04mKeynote: A Secure Supply Chain Vision
57mFrontiers in Securing the Open Source Ecosystem