Wg-best-practices-os-developers Alternatives

wg-best-practices-os-developers reviews and mentions

• 12 Free Courses To Help You Develop More Secure Software - Shift Security Left
  2 projects | dev.to | 8 Apr 2024

  You will learn about the different checks provided by OpenSSF Scorecard, how to configure the checks for your environment, and how to automate their implementation.

• Heartbleed and XZ Backdoor Learnings: Open Source Infrastructure Can Be Improved Efficiently With Moderate Funding
  2 projects | dev.to | 7 Apr 2024

  In April 2014, the Linux Foundation Executive Director Jim Zemlin seized the opportunity to get visibility and managed to get Amazon Web Services, Cisco, Dell, Facebook, Fujitsu, Google, IBM, Intel, Microsoft, NetApp, Qualcomm, Rackspace, and VMware to all pledge to commit at least $100,000 a year for at least three years to the Core Infrastructure Initiative. The initiative continued for many years and eventually transformed into the Open Source Security Foundation. Also due to Heartbleed, the European Commission launched the EU-Free and Open Source Software Auditing project and spent at least a million euros on auditing OpenSSL, the Apache Server, KeePass, and other security-critical open source software.

• Compiler Options Hardening Guide for C and C++
  2 projects | news.ycombinator.com | 30 Nov 2023

  https://github.com/ossf/wg-best-practices-os-developers/issu...

  The idea of using `-fsanitize-minimal-runtime` is interesting. I don't have any direct experience with that option. I've created an issue to investigate maybe adding that to the guide. Thanks for the tip!

• OSCM: The Open Source Consumption Manifesto
  4 projects | dev.to | 4 Sep 2023

  These are technical details that are out of the scope of this article, but we think that it is important to mention them because the security strategy of a company should be based on a solid foundation, and these frameworks show that there are already some good starting points, companies don't have to start from scratch. If you want to know more about them or other ways to improve the security of your software supply chain, visit the OpenSSF website.

• Best practices for effective attack surface analysis
  2 projects | dev.to | 19 Jul 2023

  Participating in the cybersecurity community can be a useful way to gain information about security trends and possible risks. Organizations such as the OWASP, OpenSSF, SANS Institute, and ISC2 promote the exchange of information between organizations and can raise the alarm about emerging issues or hacking strategies.

• Need help with use cases for my new open-source project that deals with open-source security
  1 project | /r/opensource | 3 Jan 2023

  You might find Awesome Security or Other Security Awesome Lists and the Open Source Security Foundation helpful

• Wake-up call: why it's urgent to deal with your hardcoded credentials
  2 projects | dev.to | 30 Oct 2022

  Today corporations, open source projects, nonprofit foundations, and even governments are all trying to figure out how to improve the global software supply chain security. While these efforts are more than welcome, for the moment, there is hardly any straightforward way for organizations to improve on that front.

• 'Securing Open Source Software Act' Introduced to US Senate
  2 projects | news.ycombinator.com | 23 Sep 2022

  https://github.com/ossf/wg-best-practices-os-developers/blob...

• Great Time at JavaZone 2022
  3 projects | dev.to | 14 Sep 2022

  Cross industry best practices - openssf.org

• Ask HN: Who is hiring? (June 2022)
  22 projects | news.ycombinator.com | 1 Jun 2022
• A note from our sponsor - SurveyJS
  surveyjs.io | 13 Jun 2024

  With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js. Learn more →