At AWS, security is our number one priority, and that applies to our open-source work too. Come hear about the techniques, tools, and protocols we've developed for auditing open-source software for security risks, how to mitigate these risks, and how we manage the tricky balance between openness and collaboration and handling embargoed security issues and critical fixes.