Josh and Kurt talk to David A. Wheeler about everything OpenSSF. The Open Source Security Foundation is part of the Linux Foundation, and there are 6 OpenSSF working groups. David does a great job explaining how the OpenSSF works and what the 6 working groups are doing. The working group are (in no particular order): Identifying Security Threats, Security Tooling, Best Practices, Vulnerability Disclosures, Digital Identity Attestation, Securing Critical Projects.

Show Notes

• David A Wheeler
• Episode 14 – David A Wheeler: CII Badges
• Sigstore joins the OpenSSF
• OpenSSF Technical Working Groups
• NPM requires MFA
• LISH
• Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks