Google Cloud to offer vetted open-source software to organisations
In light of recent vulnerabilities such as Log4Shell, Google is launching its Assured Open Source Software service later this year.
Stay updated with breaking news from Open Source Vulnerability. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
In light of recent vulnerabilities such as Log4Shell, Google is launching its Assured Open Source Software service later this year.
The OSV schema aims to precisely describe vulnerabilities in a way tailored to the open source use case, "with the goal of automating and improving vulnerability triage for developers and users of open source software," Google stated in a blog post published on June 24. The project could allow various developer tools to natively handle vulnerability information and make it easier for users of open source components to know whether particular vulnerabilities affect their applications. The aim is to reduce the effort required to document vulnerabilities in open source projects, to make the is...