CISA How secure is your package repo? CISA defines four levels of security maturity, starting at zero , and Joe Fay February 12, 2024
open source A free new repository offers intel on malicious open source , and The Stack October 13, 2023
CISO JPMorgan’s Global CISO urges use of Sigstore, Alpha-Omega in open source security drive , and Edward Targett October 5, 2023
Cybersecurity "We have an endemic problem" OpenSSF director warns over secure development , and Eliot Beer August 18, 2022