Managing the risk and growth of using Open Source Software
summary
Companies find 60–80% OSS in typical apps and a 250‑app scan shows evaluators know only ~50% of their usage; ~90% of apps have at least one vulnerability and 42% have more than five. Automated SCA integrated into IDEs (demoed with Eclipse), repos (GitHub Enterprise) and CI generates pull requests to update libraries (example zookeeper 3.4.3 → 3.4.14), scans containers and serverless, and prioritizes fixes by call‑graph so teams focus on the 85% ineffective vs effective vulnerabilities.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:04Welcome
- 1:40Open Source Software Growth
- 4:15Open Source Risks
- 6:32Visibility and Control
- 10:16Automated Open Source Management
- 15:23Vulnerability Scanning
- 26:34Containers and Service Functions
- 27:32Summary
- 29:21Question
related talks
30mDevSecOps: Understanding Open Source Software risk in your applications
38mApplication Security in the age of Open Source
31mThe Value of OSS Management for Risk Mitigation
38mBetter, Faster, Stronger: How the Global Acceleration of OS Development Is Changing
30mA Lawyer and an Engineer Walk Into a Bar and Talk Open Source
33mThe Cathedral, the Bazaar, and the Coffee House
45mPanel Discussion: Managing Open Source...
20mOpen source in the enterprise