OpenSSF Courses and Certifications

Security Is an Ecosystem - We Can't Be Secure in Isolation

Explore the evolving security landscape and OpenSSF's role in enhancing organizational security posture with industry expert Omkhar Arasaratnam.

• YouTube
• 16 minutes
• On-Demand
• Free Online Course

SLSA in Action: Securing the Software Supply Chain

Live demonstration of securing software supply chain and achieving SLSA compliance using sample repo. OpenSSF SLSA group showcases tooling developed to meet SLSA 1.0 Build Specification, offering practical insights into implementation.

• YouTube
• 40 minutes
• On-Demand
• Free Online Course

Implementing OpenSSF Best Practices Badges and Scorecards for Project Security

Learn to enhance open-source project security using OpenSSF Best Practices Badges and Scorecards. Gain practical tips for implementation and addressing common issues to improve your project's security posture.

• YouTube
• 53 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

SLSA FRSCA Recipe for Secure Supply Chain

Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.

• YouTube
• 33 minutes
• On-Demand
• Free Online Course

How OpenSSF and Industry Improve Open Source Security

Experts discuss collaborative efforts to enhance open source supply chain security, sharing insights on identifying, researching, and addressing complex challenges in the industry.

• YouTube
• 42 minutes
• On-Demand
• Free Online Course

What You Need to Know and Do About Vulnerability Disclosure

Learn about coordinated vulnerability disclosure in open source projects, its importance for security, and implications for maintainers and users.

• YouTube
• 18 minutes
• On-Demand
• Free Online Course

Assessing the Risk of Open-source Components Using OpenSSF's Scorecard

Learn to evaluate open-source components' security using OpenSSF's Scorecard, enhancing your ability to assess and mitigate risks in software development.

• YouTube
• 42 minutes
• On-Demand
• Free Online Course

Summing Up the OpenSSF Summit - May 2022 Gathering and Action Plan

Experts discuss OpenSSF's May 2022 summit, addressing open source security challenges, government involvement, and future initiatives for enhancing software supply chain resilience.

• YouTube
• 44 minutes
• On-Demand
• Free Online Course

Improving the Security of a Large Open Source Project One Step at a Time

Explore Node.js security initiatives, learn from real-world vulnerabilities, and discover how to contribute to the project's safety. Gain insights to enhance your own development process and ecosystem security.

• YouTube
• 47 minutes
• On-Demand
• Free Online Course

Simplifying Coordinating Vulnerabilities and Disclosures in Open Source Projects

Learn best practices for handling vulnerability disclosures in open source projects. Discover tools and templates to streamline the process and reduce stress when dealing with security reports from researchers.

• YouTube
• 45 minutes
• On-Demand
• Free Online Course

Open Source Software Security Mobilization Plan - Press Briefing

Executives announce Open Source Software Security Mobilization Plan, outlining ten investment streams to enhance open source software resilience and security following a summit with industry and government leaders.

• YouTube
• 40 minutes
• On-Demand
• Free Online Course

Securing Your Supply Chain by Building with FRSCA

Explore FRSCA, an OpenSSF project implementing CNCF's Secure Software Factory Reference Architecture to protect against supply chain attacks and enhance build pipeline security.

• YouTube
• 38 minutes
• On-Demand
• Free Online Course

Improving the Security of a Large Open Source Project One Step at a Time

Explore Node.js security initiatives, from new features to vulnerability management. Learn to apply these insights to your development process and contribute to the Node.js community's security efforts.

• YouTube
• 48 minutes
• On-Demand
• Free Online Course

Ensuring Open Source Security - A Shared Responsibility

Explore the collaborative efforts between public, private sectors and community to secure open source, and learn about key security trends and OpenSSF's current focus areas.

• YouTube
• 16 minutes
• On-Demand
• Free Online Course

Bridging Business and Open Source - Integrating Innovation and Community Contributions

Explore how Cybertrust Japan bridges open source and business, focusing on MIRACLE LINUX, AlmaLinux contributions, SBOM generation, and security enhancements through OpenSSF activities.

• YouTube
• 35 minutes
• On-Demand
• Free Online Course