OpenSSF Courses

OSS-SIRT - Identify Core Services 2

Explore essential core services for open source security incident response teams, enhancing your ability to manage and mitigate security threats effectively.

• YouTube
• 1 hour 1 minute
• On-Demand
• Free Video

SLSA: A Security Paradigm for Software Supply Chain Integrity

Explore SLSA levels, software supply chain security basics, and tools like Cosign to enhance artifact integrity and benefit your organization.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Proactive Supply Chain Security with GUAC

Explore GUAC, a tool for proactive software supply chain security. Learn about its features, recent release, roadmap, and how to contribute to this OpenSSF project.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Improving Posture of Critical OSS Projects with Security Audits

Explore effective security audits for open source projects, including top vulnerabilities, lessons learned, and common mistakes to avoid. Enhance your OSS security posture.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Community Engagement and Security Initiatives: Examples from Python and Rust

Explore Python and Rust Foundations' security initiatives, focusing on community engagement, consensus building, transparent communication, and addressing pushback for better open-source security practices.

• YouTube
• 23 minutes
• On-Demand
• Free Video

New Foundations of SBOM Are Underway at OpenSSF

Explore new OpenSSF projects addressing SBOM challenges, including protobom for data handling, sbomit for trust verification, and bomctl for basic operations. Learn about their impact on the SBOM ecosystem.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Securing the Software Supply Chain: An In-Depth Exploration of SLSA

Explore SLSA's impact on software supply chain security, covering fundamentals, trust, transparency, security levels, industry effects, and future trends.

• YouTube
• 59 minutes
• On-Demand
• Free Video

Exploring the Large Language Models Open-Source Security Landscape

Explore security risks of Large Language Models, analyze their open-source ecosystem, and learn mitigation strategies. Gain insights from a comparative study of popular LLM projects' security postures.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Trusted Publishing: Lessons from PyPI

Explore PyPI's trusted publishing scheme, its OpenID Connect-based authentication, and implementation details. Learn about security improvements and potential applications for other package indices.

• YouTube
• 24 minutes
• On-Demand
• Free Video

A Balancing Act: Collaboratively Developing Security in Open Source

Explore challenges and opportunities in developing open-source security, balancing collaborative practices with rigorous security measures across ecosystems and organizations.

• YouTube
• 20 minutes
• On-Demand
• Free Video

OSV and the Life of an Open Source Vulnerability

Explore OSV's role in simplifying open source vulnerability management throughout the software development lifecycle, from database creation to guided remediation.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Alpha-Omega: Securing Open Source Software Through Direct Maintainer Engagement

Explore strategies for enhancing open source software security through direct collaboration with project maintainers.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Mobilizing for the Open Source Security Mobilization Plan

Learn how OpenSSF's 10-point plan aims to improve open source software security and discover ways to contribute to this crucial initiative.

• YouTube
• 22 minutes
• On-Demand
• Free Video

What's New in the World of SBOMs?

Explore recent developments in Software Bill of Materials (SBOMs) with industry experts, discussing advancements, challenges, and best practices in software supply chain security.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Trials, Tribulations and Triumphs - An End User's Perspective on Software Supply Chain Security

Explore enterprise challenges, initiatives, and future vision for open source software supply chain security from an end user perspective. Learn about threat mitigation strategies and collaborative efforts.

• YouTube
• 31 minutes
• On-Demand
• Free Video