Google Open Source Security News Today

/PRNewswire/ -- The Open Source Security Foundation (OpenSSF) is proud to announce the release of version 1.0 of Supply-chain Levels for Software Artifacts...

SLSA v1.0 has been designed to make the software supply chain security framework more accessible and specific to areas of the software delivery lifecycle.

OSV-Scanner is a free vulnerability scanner that open source developers can use to check for vulnerabilities in their projects' dependencies.

Linux Foundation Announces Free sigstore Signing Service to Confirm Origin and Authenticity of Software Red Hat, Google and Purdue University lead efforts to ensure software maintainers, distributors and consumers have full confidence in their code, artifacts and tooling News provided by Share this article Share this article SAN FRANCISCO, March 9, 2021 /PRNewswire/ -- The Linux Foundation, the nonprofit organization enabling mass innovation through open source, today announced the sigstore pr...

The Linux Foundation, the non-profit organization enabling innovation through open source, has announced a new service to improve the security of the software supply chain by enabling the easy adoption of cryptographic software signing.