secure_consumption_OSS_SCALE21x.md

Secure Consumption of Open Source Software: Evaluating, Utilizing, and Contributing Safely - SCaLE21x

Resources

Tools

• cve-bin-tool
• OpenSSF Scorecard
• OpenSSF Best Practices Badge
• Secure Supply Chain Consumption Framework (S2C2F)

Guides and Community Resources

• OWASP Free for Open Source Application Security Tools
• CHAOSS Community Metrics
• OpenSSF Concise Guide for Evaluating Open Source Software
• CVE.org

Articles

• 2024 OPEN SOURCE SECURITY AND RISK ANALYSIS REPORT
• Summary of Census II: Open Source Software Application Libraries the World Depends On
• Open Source is Bigger Than You Can Imagine
• Octoverse: The state of open source and rise of AI in 2023

Slides