Open source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures to secure it properly, according to a new guide published […]
HeroDevs Allies with Commonhaus Foundation to Support Open Source Software
HeroDevs this week revealed it has joined the Commonhaus Foundation as the founding member of the Open Source Sustainability Initiative (OSSI) after establishing partnerships with the open source Hibernate, Jackson, […]
Can Chainguard Save Open-Source Software From Mythos? Can Anyone?
IBM and Red Hat aren’t the only ones that mean to lock down open-source code against AI hacking tools. Last week, IBM and Red Hat launched Project Lightwell to protect […]
Open Source Contribution is About More Than Just Altruism
Passive consumption of open source software creates hidden costs, including $670,000 annually in internal workarounds; however, organizations that shift to upstream contribution report up to 5x returns through improved talent retention and faster development cycles.
OpenSSF Defines Baseline for Securing Open Source Software
The Open Source Security Foundation (OpenSSF) has launched an initiative to provide maintainers of open source software projects with a set of baseline security requirements that can be realistically attained and maintained by small teams.
Scarf Integrates Platform for Tracking Open Source Software Usage With Salesforce
Scarf today at the KubeCon + CloudNativeCon 2024 conference revealed it has integrated its platform for tracking consumption of open source software with the Salesforce customer relationship management (CRM) platform
White House to Spend $11 Million to Study Open Source Software Use
Hardening the security around open source software has been a key part of the White House’s larger cybersecurity efforts since President Biden released his executive order for improving the United […]
ForAllSecure Adds Free Testing Tools for OSS
ForAllSecure is investing to make open source software (OSS) more secure and is making available free, personal-use versions of its Mayhem application security testing tools infused with artificial intelligence (AI) […]
Fixing Spring4Shell Starts With Software Supply Chain Management
Spring4Shell is the latest call to action for radically improved software supply chain integrity. While Spring4Shell investigations continue, one conclusion is indisputable: We must holistically rethink the way we continuously […]
IDC Tech Spotlight: Making Open Source Work for You
Starting from remarkably humble beginnings over three decades ago, open source software is the story of a better mousetrap that wins over the world. Originally, the intent of open source […]
