#osssecurity
The Gemara (pronounced "gem-mara" 💎) project provides a logical model to describe compliance activity categories, how they interact, and the schemas to enable automated interoperability.

Watch the Spotlight: https://www.youtube.com/watch?v=aKhebJxVntI

#OSSSecurity
Gemara: GRC Engineering Model for Automated Risk Assessment | OpenSSF Project Spotlight
YouTube video by OpenSSF
www.youtube.com
March 19, 2026 at 8:00 PM
#AgenticAI is moving fast -- but is it secure? 🤖🔐

📅 Join us for an OpenSSF Tech Talk on the practical realities of securing agentic systems on March 17, 1PM ET!

Hear from experts from Microsoft, Canonical, TestifySec, and Thread AI!

Register: openssf.org/resources/te...

#OSSSecurity
March 6, 2026 at 9:08 PM
Think you need special permission to contribute to OpenSSF? Think again. ❌

#OSSSecurity thrives on diverse perspectives. Whether you’re into AI/ML security, policy, or dev best practices, there’s a seat at the table for you. 🪑

Read: openssf.org/blog/2026/03...
March 5, 2026 at 8:05 PM
Package repository security impacts every OSS ecosystem. 🔐

OpenSSF convened npm, PyPI, Maven Central, RubyGems, crates.io & more to tackle shared challenges -- from identity to governance and sustainability.

Read: openssf.org/blog/2026/02...

#OSSSecurity
February 19, 2026 at 9:19 PM
Open Source #SecurityCon Europe 2026 is heading to Amsterdam 🇳🇱

This blog highlights speakers & perspectives from across the OpenSSF community, all bringing hands-on experience from production environments.

Read the blog: openssf.org/blog/2026/02...

#OSSSecurity
February 3, 2026 at 8:21 PM
OpenSSF community will be at #FOSDEM2026 this week, bringing practical perspectives on CRA readiness, vulnerability intelligence, SBOMs, and software supply chain security 🔐

Read the blog and find out where to find us & what not to miss: openssf.org/blog/2026/01...

#OSSSecurity
January 28, 2026 at 5:03 PM
🎉 OpenSSF’s 2026 Themes are here, and so is Honk’s 2026 Vision Board, inspired by our new blog post that outlines the community roadmap for securing the future of open source!

Read the blog & see how themes align with our 2026 priorities: openssf.org/blog/2026/01...

#OSSSecurity
January 15, 2026 at 9:33 PM
Conference badges can mean more than a name 🎟️

Madalin shares what it has meant to represent the Open Source Security Foundation and The Linux Foundation across Europe 🌍 from #opensource events to policy rooms and standards discussions.

Read the story: openssf.org/blog/2026/01...

#OSSSecurity
January 9, 2026 at 3:03 PM
🎙️ "What's in the SOSS?" Podcast Season Finale is live!

Join co-hosts CRob & Yesenia for a special season finale celebrating OpenSSF’s 5th anniversary, & a look back at a truly transformative year for open source security. 🛡️

🎧 Listen: openssf.org/podcast/2025...

#OSSSecurity
December 30, 2025 at 6:15 PM
🌟 New OpenSSF Project Spotlight 💃

In this interview, SLSA Steering Committee member Tom Hennen (Google) breaks down how SLSA is helping organizations strengthen trust across the software supply chain.

Watch the full Project Spotlight:
🔗 www.youtube.com/watch?v=gdYl...

#OpenSSF #SLSA #OSSSecurity
SLSA: Industry-Driven Guidelines for Software Supply Chain Security | OpenSSF Project Spotlight
YouTube video by OpenSSF
www.youtube.com
November 26, 2025 at 6:48 PM
Last week at #KubeCon, Stacey and Adolfo delivered one of the most memorable and entertaining keynotes.

This recap breaks down what happened on stage and why it captured so much attention across the conference. Read now: openssf.org/blog/2025/11...

#OSSSecurity
November 19, 2025 at 6:56 PM
💬 Last month, LF Europe (@linuxfoundationeu.bsky.social), OpenSSF, and CEPS brought the open source community together in Ghent and Brussels for a full week of conversations on security, collaboration, and Europe’s digital future.

Read the recap: openssf.org/blog/2025/11...

#OSSSecurity
November 17, 2025 at 9:19 PM
Join us at #KubeCon for a deep-dive on SBOMit -- a build-time technique for generating in-toto attestations and using them to produce SBOMs that don’t miss dependencies.

📅 Tue, Nov 11, 2025
🕑 2:00–5:00 PM
📍 Building B | Level 2 | Room B213

#SBOM #OSSSecurity
November 5, 2025 at 9:44 PM
🚆 From Ghent to Brussels!

At the end of October, OpenSSF, the Linux Foundation, and Linux Foundation Europe will host three gatherings advancing security, policy, and collaboration across Europe’s open source ecosystem.

👉 Learn more: openssf.org/blog/2025/09...

#CRA #OSSSecurity
September 19, 2025 at 3:43 PM
On August 15, GitHub’s Open Source Friday spotlighted the OpenSSF Global Cyber Policy WG in a live session hosted by Kevin Crosby, GitHub.

📖 Read the recap blog, watch the replay, and explore ways you can join the conversation: openssf.org/blog/2025/09...

#OSSSecurity
September 11, 2025 at 5:18 PM
🌏 #India is rapidly climbing the charts in OSS contributions. But as Ram Iyengar notes, “They were doing all of this with zero awareness of security.”

Learn how OpenSSF's building India's #OSSSecurity community: openssf.org/blog/2025/07...

Join us: events.linuxfoundation.org/openssf-comm...
July 21, 2025 at 7:34 PM
Welcome to the OpenSSF family, OpenBao Project! 🎉

#OpenBao is a new sandbox project focused on secure secrets and encryption management—originally forked from Vault & now evolving to serve open source communities even better.

Read the blog: openssf.org/blog/2025/06...

#OSS #OSSSecurity
June 17, 2025 at 8:19 PM
🚨 It’s happening at 1PM ET—don’t miss it!

🎙️ CRA-Ready: How to Prepare Your Open Source Project for EU Cybersecurity Regulations
🔗 Register now: openssf.org/resources/te...
📍 Where: Zoom!

What does the EU’s #CRA mean for open source—and how can your project stay ahead?

#OSSSecurity
June 12, 2025 at 4:02 PM
🚨 CI/CD attacks are on the rise.

New blog breaks down recent tj-actions & reviewdog breaches—and offers practical tips for hardening GitHub Actions workflows.

A must-read for open source maintainers: openssf.org/blog/2025/06...

#OSSSecurity
June 11, 2025 at 5:37 PM
🧰 #SBOMs are the foundation of understanding your software supply chain, but picking the right tool can be tricky. Read this guest blog as Nathan walks through key SBOM generation tools:
openssf.org/blog/2025/06...

#OpenSSF #OSSSecurity
June 5, 2025 at 8:43 PM
There’s still time to submit your talk for #OpenSSFCommunity Day Europe, happening on 28 August in Amsterdam! 🇳🇱

🗓️ CFP closes 26 May at 23:59 CEST
📖 Read the blog: openssf.org/blog/2025/05...
🎤 Submit your proposal now: events.linuxfoundation.org/openssf-comm...

#osssecurity
May 9, 2025 at 4:20 PM
📢 The OpenSSF #BestPractices WG has released a new guide: Simplifying Software Component Updates.

Modern software is mostly reused software, often made up of thousands of OSS components.

📖 Read the blog and learn about the guide: openssf.org/blog/2025/05...

#OSSSecurity
May 7, 2025 at 6:18 PM
🚨 Last chance to submit your talk!

The CFP for #OpenSSFCommunity Day India closes May 4 (Sunday).

Join us in Hyderabad for a day focused on open source security 🔐

🎤 Submit your proposal now: events.linuxfoundation.org/openssf-comm...

#OSS #OSSSecurity #India
Call For Proposals (CFP) | LF Events
The Open Source Security Foundation (OpenSSF) Community Days are an opportunity for Community Members from across the Security and Open Source ecosystem to get together and share ideas and progress on...
events.linuxfoundation.org
May 1, 2025 at 5:53 PM
⏰ Last call! The #RustConf 2025 CFP closes today!

Join us in beautiful #Seattle — or online — for 2+ days of Rust programming talks, hands-on workshops, UnConference sessions, and more.

Submit your proposal now: sessionize.com/rustconf-2025

#OSSSecurity #OpenSource
RustConf 2025: Call for Proposals
Join us in beautiful Seattle, Washington or online for 2+ days of excellent Rust programming language content, Rust training/workshops, an "UnConferen...
sessionize.com
April 29, 2025 at 6:39 PM
📣 Excited to host the OpenSSF #OSSSecurity Meetup May 20 at Fujitsu Yokohama Hub!
Topics: #SBOM Everywhere, Security Tooling WG, #CRA deep dive.
Seats limited — register by May 19! 🔗 www.linuxfoundation.jp/events/2025/...
2025年 第1回 OSSセキュリティMeetup ご案内 ー 5月20日 富士通 Yokohama Hub - The Linux Foundation
業界で最も重要なオープンソースセキュリテ...
www.linuxfoundation.jp
April 28, 2025 at 7:52 PM