How Cybertrust Japan is Trying to Tackle OSS Security and Make...
summary
Cybertrust Japan announces an OSS Security Mobilization Plan and launches an OpenSSF Japan chapter, prioritizing streams 3 signature, 9 SBOMs and 10 supply chain security. Plans include operating a local Sigstore instance in Japan, adopting SPDX (not CycloneDX) in products, and contributing code and fixes to CIP Studio, the Linux CI/LCI test frameworks and Yocto/meta layers. Ongoing work ties these efforts to its Miracle Linux distro and a vulnerability management service.
AI-written summary · about
chapters (4)
- 0:00Start
- 8:51Important Events and OSS Community Reactions
- 28:53For Stream 3: Digital Signature
- 34:15For Stream 10: Better Supply Chain Security
related talks
35mWhat We Learned from Creating OSPO at Cybertrust Japan
30mOSS Sustainability...
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
37mSecuring OSS across the whole supply chain and beyond
42mAction and Impact Panel: How OpenSSF and Industry Improve Open Source Security
59mSecurity in the Open: OSS and AWS
39mPanel Discussion: OSPO Panel of Japan
44mSecuring Open Source Software - End-to-End, at Massive Scale, Together