Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Secure Software Supply Chain Framework (S2C2F) Guide - OpenSSF SIG Meeting

OpenSSF via YouTube

Overview

Explore the S2C2F SIG's efforts to enhance open source software dependency security in this 48-minute conference talk. Delve into the group's work within the OpenSSF's Supply Chain Integrity Working Group, focusing on the development and improvement of the S2C2F guide. Learn about the guide's two-part structure, including solution-agnostic practices and a maturity model-based implementation guide. Discover strategies for raising awareness, adoption challenges, and best practices for organizations seeking to bolster their software supply chain security. Gain insights into the Scorecard project, target audience considerations, and educational approaches to promote secure OSS consumption. Examine the importance of referencing S2C2F and implementing security tools in the development process.

Syllabus

Introduction
Strategy Doc
Awareness
Bill
Is awareness a problem
Adoption
Best Practices
Scorecard
Target Audience
Education Best Practices
Spread Awareness
Reference S2C2F
Education
Security Tools

Taught by

OpenSSF

Reviews

Start your review of Secure Software Supply Chain Framework (S2C2F) Guide - OpenSSF SIG Meeting

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.