Google sponsors pilot program to improve open source security

guest · Oct 1, 2021

Google sponsors pilot program to improve open source security
October 1, 2021
https://betanews.com/2021/10/01/google-sponsors-improve-open-source-security/

Google is announcing its sponsorship of the Secure Open Source (SOS) pilot program, run by the Linux Foundation, which financially rewards developers for enhancing the security of critical open source projects.

Google is starting with a $1 million investment and plans to expand the scope of the program based on community feedback.
Click to expand...

SOS rewards a very broad range of improvements that proactively harden critical open source projects and support infrastructure against application and supply chain attacks. To complement existing programs that reward vulnerability management, SOS's scope is wider in the type of work it rewards in order to support project developers.
Click to expand...

Submissions will be evaluated in consideration of the guidelines established by the National Institute of Standards and Technology's definition, along with other criteria including:

How many and what types of users will be affected by the security improvements?

Will the improvements have a significant impact on infrastructure and user security?

If the project were compromised, how serious or wide-reaching would the implications be?

The program's initial focus will be on software supply chain security improvements, adoption of software artifact signing and verification, and improvements producing higher OpenSSF Scorecard results.
Click to expand...

You can find out more about the program here.
Click to expand...

Log in or Sign up

Google sponsors pilot program to improve open source security

guest Guest

Log in or Sign up

Google sponsors pilot program to improve open source security

guest Guest

Useful Searches