OpenSSF Courses

SBOMs Everywhere - Work in Progress and Challenges Ahead

Explore the progress and challenges of Software Bill of Materials (SBOMs) implementation across industries with insights from a leading expert in dependable embedded systems.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Driving Security at Scale: Principles for Package Repository Security - Lecture

Explore principles for enhancing package repository security, including a four-level maturity model. Learn about CISA's collaboration with OpenSSF to improve open source ecosystem security at scale.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Leveraging Sigstore Capabilities in a Local Environment

Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Beyond "Just Update All the Things": Uncovering the Nuances of Dependency Security

Uncover complexities of dependency security, explore OSV project solutions, and learn strategies for integrating vulnerability management into developer workflows.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Compiler Options Hardening for C and C++

Explore compiler options to enhance C/C++ program security. Learn about memory-safety issues, mitigation techniques, and the OpenSSF Compiler Options Hardening Guide for informed decision-making.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Born of Hard Times - The Clean Dependency Project is Here to Help

Explore the Clean Dependency Project's proactive approach to OSS vulnerability management and learn how to contribute to this innovative open-source initiative.

• YouTube
• 14 minutes
• On-Demand
• Free Video

Sigstore: 2024 and Beyond

Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.

• YouTube
• 14 minutes
• On-Demand
• Free Video

Improving FOSS Security - Best Practices for Vulnerability Management

Discover best practices for FOSS projects to enhance security, from vulnerability prevention to effective response strategies. Learn to protect users through responsible security management.

• YouTube
• 18 minutes
• On-Demand
• Free Video

Securing Software Repositories - EMEA Friendly

Explore best practices for securing software repositories, focusing on EMEA-specific considerations and strategies to enhance code protection and integrity.

• YouTube
• 1 hour
• On-Demand
• Free Video

Secure Software Supply Chain Framework (S2C2F) Guide - OpenSSF SIG Meeting

Explore secure open source software consumption practices and improve your software supply chain integrity with the S2C2F guide.

• YouTube
• 48 minutes
• On-Demand
• Free Video

Secure Software Supply Chain at IBM

Explore IBM's approach to securing the software supply chain, focusing on key strategies and best practices for enhancing cybersecurity in development processes.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain

Explore transparent digital signatures with Sigstore to enhance software supply chain security and learn practical implementation strategies.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Open Source Security and OpenSSF's Best Practices Working Group

Explore open source software security principles and OpenSSF's best practices, including supply chain security and steps to address challenges.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Securing Software Repositories - EMEA Friendly

Explore best practices for securing software repositories, focusing on strategies tailored for EMEA regions and addressing global cybersecurity challenges.

• YouTube
• 2 hours 10 minutes
• On-Demand
• Free Video

Securing Software Repositories - EMEA Friendly

Explore strategies for securing software repositories, focusing on best practices and tools to protect against vulnerabilities and ensure code integrity.

• YouTube
• 34 minutes
• On-Demand
• Free Video