Lightning Talk: Secure Consumption of Open Source Software: Evaluating, Util...
summary
Open source appears in 96% of sampled codebases with 77% of the code being open source and estimates saying 70–90% of any given software is OSS, so security choices matter. Practical checks include running cve-bin-tool (about 290 checkers) to find vulnerable components, using OpenSSF Best Practices Badge levels (passing/silver/gold) and running OpenSSF Scorecard as a CLI or GitHub Action for automated checks. Quick audits catch issues like missing licenses; consumers become responsible for tracking and patching dependencies.
AI-written summary · about
chapters (6)
- 0:00Open source security challenges
- 1:45Why open source security matters
- 2:50Evaluating project health
- 5:58Tools for secure consumption
- 7:23OpenSSF Scorecard demo
- 9:30Responsibility in open source
related talks
41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...
16mKeynote: Back to Security Basics: Evaluating, Consuming, and Contributing Open Source Software
19mResponsible consumption of open source- 41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...
41mManaging the risk and growth of using Open Source Software
37mOpenSSF Best Practices for Everyone!
11mLightning Talk: A Supply Chain Security View of OpenSearch
38mApplication Security in the age of Open Source