🎙️ Submit your talk for: OpenSSF Community Day Europe by July 12

Submit your CFP for OpenSSF Community Day Europe 2026

Submit Your Proposal by July 12, 2026

The Open Source Security Foundation (OpenSSF) is a community of software developers, security engineers, and more who are working together to secure open source software for the greater public good.

Collaborate on capabilities and best practices that secure open source software.

Participate in the latest community conversations and engage with experts.

Take free courses on secure coding practices as part of our certificate program.

Explore our helpful security guides to help secure your project from the start.

What’s in the SOSS? Podcast

OpenSSF Hosted Events

OpenSSF events are a great opportunity to get involved with the OpenSSF community across the security and open source ecosystem. Join us and share ideas, progress, and collaborate on securing open source software.

Read the Latest Reports From OpenSSF

2026 CRA Awareness and Readiness Report
2026 CRA Awareness and Readiness Report

CRA Awareness and Readiness Report

Securing Open Source in the Age of AI
Image

Securing Open Source in the Age of AI

Gemara: A Governance, Risk, and Compliance Engineering Model for Automated Risk Assessment
Gemara

Gemara: A Governance, Risk, and Compliance Engineering Model for Automated Risk Assessment

Recent Blog Posts

VIEW ALL BLOGS →

ImageBlogGuest BlogBridging the Gap Between Code and Research: Why SCORED ’26 Matters for Open Source Security
June 23, 2026

Bridging the Gap Between Code and Research: Why SCORED ’26 Matters for Open Source Security

Let’s be completely honest about how we’ve historically handled security research: academia and open source practitioners have basically been living on two different planets. That’s why we created SCORED (the…
OpenSSF
Love0
ImageBlogGuest BlogMini Shai-Hulud: Where SLSA’s Boundaries Fall
June 10, 2026

Mini Shai-Hulud: Where SLSA’s Boundaries Fall

The “Mini Shai-Hulud” attack chained a GitHub Actions workflow misconfiguration, cache poisoning, and OIDC token extraction to publish malicious packages through legitimate CI/CD pipelines.
OpenSSF
Love0
ImageBlogThe “Skyway” to OSS Security: OpenSSF Community Day North America 2026 Recap
June 5, 2026

The “Skyway” to OSS Security: OpenSSF Community Day North America 2026 Recap

The open source community recently gathered in Minneapolis for Open Source Summit North America and OpenSSF Community Day North America 2026. Functioning as a collaborative “Skyway,” the Open Source Security…
OpenSSF
Love0

Open source software is pervasive in data centers, consumer devices, and applications. Securing open source software requires fostering collaboration, establishing best practices, and developing innovative solutions.

Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.

Explore Membership in OpenSSF

Mastodon