Software Supply Chain

openssf.org·há 19 dias

What’s in the SOSS? Podcast #66 – S3E18 Turning AI into the Ultimate Open Source Maintainer Power Tool with Michael Winser

In Episode #66 of What’s in the SOSS?, CRob welcomes back Michael Winser to celebrate Alpha-Omega surpassing $20 million in security grants. They discuss the economics of package registries and how Al

openssf.org·há cerca de 1 mês

Navigating The OpenSSF is as Easy as Floating Down A Lazy River

Navigating the vast ecosystem of the Open Source Security Foundation (OpenSSF) is now as easy as floating down a lazy river. Discover our newly curated, role-based User Journeys designed to seamlessly

openssf.org·há cerca de 1 mês

What’s in the SOSS? Podcast #65 – S3E17 Signing the Future: Securing AI and ML Artifacts with Mihai Maruseac

In this episode of What’s in the SOSS?, host Yesenia Yser sits down with Mihai Maruseac (OpenAI) to discuss the OpenSSF Model Signing (OMS) specification, securing the AI/ML supply chain, and establis

cdn.activestate.com·há 3 meses

AI Made Your Team Faster. It Also Made Your Roadmap Unreliable.

AI coding assistants accelerate dependency intake faster than your governance can keep pace with. Here's why your sprints keep breaking — and where the fix actually lives. The post AI Made Your Team F

cdn.activestate.com·há 3 meses

You Don’t Need Your Ducks in a Row to Get Your Ducks in a Row

Waiting until you're "organized" to secure your open source supply chain is costing you. Learn the practical framework that gets you moving—starting today. The post You Don’t Need Your Ducks in a Row

activestate.com·há 3 meses

Beyond Scan & Pray: Why Curate & Govern Is the Only Model Built for AI-Speed Risk

Scan & Pray can't keep pace with AI-generated code. Learn why Curate & Govern is the security posture built for the speed and scale of modern software development. The post Beyond Scan & Pray: Why Cur

activestate.com·há 3 meses

The “As Is” Clause Was Never the Problem

The "as is" open source clause was never the problem — enterprise assumptions were. Discover why AI-assisted development has made legacy open source governance untenable, and what real governance at t

cdn.activestate.com·há 4 meses

When “Secure by Default” Only Works in One Tool, You Don’t Have a Governance Model

AI coding assistants are making dependency decisions faster than your team can review them. A tool-level integration only governs the developers who use that tool. Here's what a complete open source g