Panel Discussion: Summing Up the Summit: OpenSSF’s May 2022 Gathering and Action Plan
summary
Summary of the OpenSSF May 2022 mobilization plan presenting concrete targets: ten work streams with immediate next steps, tool pilots (notably Sigstore and Salsa), and an emphasis on embedding SBOMs everywhere into build tooling for continuous provenance and convertibility between SPDX and CycloneDX. The draft budgets total roughly $70M year one with $30M pledged so far; teams prioritize which streams yield highest impact fast, plan measurable pilots (incident response, third‑party audits, education) and start execution rather than more planning.
AI-written summary · about
chapters (4)
related talks
33mHow & Why Does The Work of OpenSSF Impact You
42mAction and Impact Panel: How OpenSSF and Industry Improve Open Source Security
22mKeynote: Securing the Open Source Ecosystem
44mSecuring Open Source Software - End-to-End, at Massive Scale, Together
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
36m6 Months In: (Building and) Using the OpenSSF Se...
57mFrontiers in Securing the Open Source Ecosystem
31mMobilizing the Open Source Industry in the Fight For Better Security By Default