OpenSFF

CNCF panellists discuss what if the maintainer of that vital component goes under a bus

Linux Foundation's OpenSFF releases npm security guide while US agencies NSA and CISA advise on hardening the component supply chain

Following Biden's Executive Order on cybersecurity, uptake of software bills of materials is taking off in the US. We need to follow suit

Integrating security checks into code should be seen as part of a bigger picture, says Kubecon panel