Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Driving Security at Scale: Principles for Package Repository Security - Lecture

OpenSSF via YouTube

Overview

Explore the principles of package repository security in this 19-minute conference talk by Jack Cable from CISA and Zach Steindler from GitHub. Learn about the collaborative effort between CISA and the OpenSSF Securing Software Repositories Working Group to develop the "Principles for Package Repository Security" - an opinionated security maturity model with four levels. Understand how this voluntary framework helps package repositories evaluate their current security capabilities and plan their security roadmap. Discover how this initiative aligns with CISA's Open Source Software Security Roadmap and the White House's National Cybersecurity Strategy. Gain insights into the content of the maturity model, the process of its development, and learn how to effectively engage with CISA and open source package repositories to enhance security across open source ecosystems.

Syllabus

Driving Security at Scale: Principles for Package Repository Security - Jack Cable & Zach Steindler

Taught by

OpenSSF

Reviews

Start your review of Driving Security at Scale: Principles for Package Repository Security - Lecture

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.