New SLSA++ Survey Reveals Real-World Developer Approaches to Software Supply Chain Security - Open Source Security Foundation

Answering even basic questions about software supply chain security has been surprisingly hard. For instance, how widespread are the different practices associated with software supply chain security? And do software professionals view these practices as useful or not? Easy or hard? To help answer these and related questions, Chainguard, the Eclipse Foundation, the Rust Foundation, and the Open Source Security Foundation (OpenSSF) partnered to field a software supply chain security survey.

Google Online Security Blog: 2022

Blog Archives - Page 11 of 20 - Open Source Security Foundation

Introducing SLSA, an End-to-End - Google Online Security Blog

Michael Traw on LinkedIn: New SLSA++ Survey Reveals Real-World Developer Approaches to Software…

Standards for software supply chain security

Avoiding the success trap: Toward policy for open-source software

Understanding the SLSA Cybersecurity Framework

Supply Chain Security: Secrets and Modern Security Frameworks

OpenSSF Aimed to Stem Open Source Security Problems in 2022 - The

What Are Supply Chain Levels for Software Artifacts (SLSA)?

Google SLSA Cybersecurity Framework: Key Takeaways - Cycode