OpenSSF Scorecard @Scorecards_dev
OpenSSF Scorecard quickly assesses open source projects for security risks through a series of automated checks. Part of @OpenSSF securityscorecards.dev Joined October 2022-
Tweets23
-
Followers131
-
Following6
-
Likes13
Improving Supply Chain Security: IBM as a user and a contributor to Open Source Security Foundation Scorecard by @tjamieibm hubs.la/Q01HzLpm0 @IBM @Scorecards_dev #OpenSource #OSSsecurity
Attention Scorecard Project users! @Scorecards_dev needs your input to determine which work to prioritize in the coming months. Please take a few minutes to fill out our survey at: hubs.la/Q01DRF4y0 Your responses will help us make informed decisions that benefit everyone
Planning on attending @RSAConference #RSAC in April? Don't miss - How Do You Trust Open Source Software? by @snaveen and Brian Russell on @Scorecards_dev & Introducing the Secure Supply Chain Consumption Framework (S2C2F) by Adrian Diglio rsaconference.com
Developers rely on open source tools to integrate critical security controls as part of the CI/CD pipeline. Continued efforts to provide resources, such as @Scorecards_dev with its promise of automated scoring...will support teams as they assemble software darkreading.com/vulnerabilitie…
"How Do You Trust Open Source Software?" - @snaveen (@EndorLabs) and Brian Russell @Google youtu.be/0b9avFup0LY
This week, we had a great discussion about @Scorecards_dev in the @nodejs Security WG. 😎 I published a little post about it in my blog. #security #OpenSSFScorecards blog.ulisesgascon.com/openssf-in-nod…
Poor software quality may have cost the US at least $2.41 trillion this year hubs.la/Q01vMFHb0 Companies are encouraged to adopt complementary security tools alongside #SBOMs to reassure developers of their components' security profile, such as @Scorecards_dev & other tools
The @EclipseFdn ran @Scorecards_dev against all their projects, analyzed the results, and created a prioritized list of activities that they’ll focus on to achieve the best and broadest impact github.com/ossf/alpha-ome…
JReleaser has reached another milestone: the project is now 100% compliant with the @theopenssf Best Practices 🎉 bestpractices.coreinfrastructure.org/en/projects/63… In addition we also have configured the @Scorecards_dev GitHub action.
@theopenssf scorecard is coming soon to NodeSecure CLI 😍(PR opened today). Really happy about this new feature ☺️
Meet @snaveen, Software Engineer, @EndorLabs #contributor and #maintainer across a few OpenSSF projects including @Scorecards_dev openssf.org/blog/2022/11/0… "A welcoming community is essential." #OSS
Scorecards reached 3K stars in GitHub. starchart.cc/ossf/scorecard…
Scorecards API usage from early fall. api.securityscorecards.dev
Our Support, Advocacy, Contribution & Implementation team (SACI FA, part of GOSST) continue to add security tools like @theopenssf Scorecards to critical OSS Projects: github.com/facebook/zstd/… github.com/systemd/system… github.com/pandas-dev/pan…
Scorecard action release github.com/ossf/scorecard…
Projects adopting the practices set out by OpenSSF in its Security Score will improve their project’s security & the security of the open source projects that depend on them hubs.la/Q01qhR0_0 @sonatype State of the Software Supply Chain Report @stephenmagill @Scorecards_dev
Scorecard v4.8.0 release. github.com/ossf/scorecard…
.@CloudNativeFdn project maintainers aim to raise their projects' security score (measured by OpenSSF Security Scorecard) ahead of #KubeCon + #CloudNativeCon NA at #SecuritySlam to increase security awareness, posture & compliance community.cncf.io/cloud-native-s… @sonatype @Scorecards_dev
The eclipse foundation is on a mission to improve the Software Supply Chain using Scorecard. Check out this blog post to see how they're making progress! mikael.barbero.tech/blog/post/ecli…
BitFlicker @bit_flicker
8 Followers 645 Following just a nerd who’d rather deal with computers than humans
Guilherme Amadio @GuilhermeAmadio
205 Followers 279 Following Physicist, software developer at @CERN. @Gentoo Linux developer. Chess enthusiast.
solst/ICE of Astarte @IceSolst
33K Followers 2K Following security engineer, ex-pentester videos @AstarteSecurity - meetup https://t.co/E4rlINC0U6
8l8 Pro @8l8pro
8 Followers 823 Following Security research: Linux, infrastructure, automation, self-hosting, privacy & OSS — own your data. Zero-trust philosophy. https://t.co/61cN8bGV1o
Dave Ishii @ishiid
1K Followers 6K Following Kiara Inc. CEO | @GetKiara | My Book https://t.co/zwMmXiyPhF | Kyoto U | Itochu EU 🇬🇧🇮🇹
Peter Dave Hello͌ͯ�... @PeterDaveHello
727 Followers 3K Following Free and open source software enthusiast, Maintainer and active contributor of few projects.
Dheeraj ⓧ @dhrjdev
5 Followers 406 Following
Quebecol @RealQuebecolGab
112 Followers 6K Following Hello i am artist, my languages is 🇫🇷🇬🇧🇯🇵, my jp is bad, ❌no crypto, no A.I. ,no minors, no e dating, no politic❌ my content may be suggestive.
GR Open Source Softwa... @oss_gr
238 Followers 432 Following GR Open Source Software builds and contributes to open source projects, and in support of @GRESEARCHjobs, a leading quantitative research and technology firm.
african_sensei @vicnature22
34 Followers 703 Following
DANIEL MIHALACHE @DANIELMIHA55590
0 Followers 7K Following
~/tinycore.lab @tinycore_lab
244 Followers 2K Following ~/tinycore.lab is a tiny warehouse space where a small group of people share their passion for research and build upon open-source individual projects.
Mohd Imran @imrandoestech
2K Followers 544 Following learning in public & helping people start their tech journey, DevOp👨💻, Go dev,Community Manager @growincomm, @awscloud Communty builder , Tech Blogger 👨💻
tonghuaroot @tonghuaroot
564 Followers 4K Following Staff Security Engineer. Cyber Security enthusiast, not Hacker. Focus on Application Security, Penetration testing. #OSCP #OSEP #MSCS #RedTeam #AppSec #WebSec
sigchill @nishitmengar
435 Followers 6K Following
Rodrigo @Rodrigo72407284
4 Followers 61 Following Engenheiro da Computação focado em firmware embarcado, Software HIM, automação com Micro controladores, C/C++, C# e protocolos UART, I2C, SPI, Modbus e CAN.
Pascal Theroux @PascalTheroux
0 Followers 274 Following
guiem @twiem
47 Followers 440 Following
Takumi Sato @TakumiS30400961
1 Followers 217 Following
I//uS!0nS @c03rci0n
69 Followers 7K Following
iZen @cxkpcuj
70 Followers 1K Following Onlooker in chaos. Just another techie. Thinker of sorts. Arsenal. Compulsive staring. Some RTs are endorsement of jokes. om/hrim/krim are my pronouns
Kenny Gatdula @KennyGatdula
368 Followers 6K Following Born in Philly, grew up in Va Beach and currently riding unicorns in GA.
Gregory Power @gregorywpower
150 Followers 751 Following Programmer, Hip-Hop/Rap Enthusiast, Nature Nerd
John Kjell 🦉🛡�... @realjohnkjell
462 Followers 555 Following Open Source Leader @TestifySec - Securing software supply chains. Formerly - community college and Toys R Us “world leader”
Mathew A @MathewArrants
0 Followers 2 Following
FNP @FollowNotPost
28 Followers 757 Following
Mary thomas @Marytho98539714
5 Followers 185 Following
Anna Wilson @Wilson333A
88 Followers 2K Following Financial analyst & economist, following developed European markets. Meditation, yoga, travel to exotic places.
Arun Sharma @mycloudworld15
27 Followers 611 Following Passionate about all things Cloud Native 🌩️ | Embracing the future of technology ☁️ | Exploring Kubernetes, Docker, and Serverless ⚙️ | CKA, CKAD, CKS
@Petkay @Petkay6463891
7 Followers 154 Following I don't know what I'm looking for yet but atleast I know what I don't want
aman kohli | he/him |... @akohli
2K Followers 4K Following Hi! Tech Director for Financial Services and Distributed Systems nerd. Music. Movies. All views shared are my own.
Seunbayo @SeunbayoNg
2K Followers 5K Following building @codeclannigeria @bonpayfinance ❤️@devrelcomafrica @faithtechhub Africa | Ex @SpheronFDN @angelhack Lead @OgunDgtSummit
Dan Fedick @DanFedick
374 Followers 3K Following Platform, Cyber, DevSecOps, SRE, and Systems thinker. danfedick.eth Musician, Farmer, Father of 9 👑 Christ Follower! 👑
Martijn van Calker @martijncalker
516 Followers 2K Following CKAD | CKA | CKS | Solution architect @true_nl | National Competition Director @atletiekunie | Trainer/coach @HJ_Foundation | Traveling | Dancing at night
Ryan Conley (he/him) ... @ryanconley
585 Followers 502 Following Retweets on ML, eBPF, Istio, Kubernetes Field Principal, Modern Apps @ VMware Office of CTO Ambassador | vExpert VCP-AM | KCNA | VCP-TKO Retweets aren't my own
SafeDep @safedepio
704 Followers 20 Following Malicious package protection for AI-native SDLC. Open source. Built in public. Protect your developers and AI agents 👉 https://t.co/448XGAtfu4
Ayush | #Open-Source ... @guptaayush9040
126 Followers 3K Following ✍ Technical Writing • Community • Open-Source @CNCF
French @nfFrenchie
4K Followers 5K Following InfoSec geek for Cloud/Clusters/Containers/things-starting-with-C ex: @BrexHQ & @Cruise. founder @ensignia_dev honk the planet
Interlynk @InterlynkIo
72 Followers 125 Following Enabling Transparency and Compliance in the Software Supply Chain. Reach us at https://t.co/TEdKQ2DlCd
Visagan | விச�... @svisagan
130 Followers 551 Following Engineer by profession, Techie by Hobby, Weather Watcher, Happy Father, Proud தமிழன்.
CNCF @CloudNativeFdn
113K Followers 769 Following CNCF is the home of @kubernetesio, @prometheusio, @envoyproxy, and many more. Join us at #KubeCon November 9-12 in Salt Lake City!
Naveen Srinivasan @Naveen_Srini_
82K Followers 29 Following Software Security | Google Open Source Peer Bonus award 2021,2022, and 2024
Azeem Shaikh @azzu38
42 Followers 105 Following
sigstore @projectsigstore
4K Followers 1 Following sigstore is a non-profit , public good software signing service funded under the OpenSSF. https://t.co/HYGAJ06Z11 [email protected]
OpenSSF @openssf
6K Followers 29 Following Open Source Security Foundation (OpenSSF) Together, we're securing the #opensource ecosystem #OSSSecurity https://t.co/uUpbn44G4Q https://t.co/adjLU8dbk0You might like
