Learn how to build robust security into open source projects from inception in this 20-minute conference talk by KodeKloud's Abhinav Sharma. Discover practical implementations of industry-tested security tools and automation strategies, including detailed demonstrations of GitHub's CodeQL for vulnerability detection, OpenSSF Scorecard for security best practices assessment, and essential supply chain security frameworks. Master the setup of automated security scanning pipelines that effectively identify vulnerabilities early in development while maintaining high security standards without creating additional developer overhead.
Building a Security-First Open Source Project: Tools and Best Practices
Overview
Syllabus
Building a Security-First Open Source Project: Tools and Best Practices - Abhinav Sharma, KodeKloud
Taught by
OpenSSF
Related Courses
-
Actions in the Wild: Usability and Ease of Use of Open Source Security Tools
-
Blue Team Tips for Using Scorecard in Security Automation
-
The Current State of Open Source Security Compliance Tooling Is Well, Sad
-
Open Source Supply Chain Security for Enterprises
-
Structured Scorecard Results: Tailor Your Own Supply-Chain Security Policies
-
Open-Source Supply Chain Security in Action
