Implementing the OpenSSF Best Practices Badges & Scorecards Into Your Project - CRob & David Wheeler

Implementing the OpenSSF Best Practices Badges & Scorecards Into Your Project - CRob, Intel & David A. Wheeler, The Linux Foundation

One of the key objectives of the The Open Source Security Foundation (OpenSSF) is to help improve the security of the software that is being developed. To do that requires simple tools that can easily be integrated into developer workflows, and requires documentation and guidance on how to do things with security in mind throughout the code's lifecycle. and experts that can coach, mentor, and work with software engineers to help improve the security of their environments, coding practices, and supply chains. This talk will showcase the work of the OpenSSF through the lens of the software developer, illustrating tangible actions the foundation is taking to educate, inform, and encourage developers to adopt and use excellent security practices. We will focus on the OpenSSF Best Practices badge and Scorecards, with specific tips on common problems and how to address them in your project, as well as countering some misunderstandings. Attendees will come away with an understanding of how to work towards achieving the prestigious OpenSSF Best Practices Badge as well as how to integrate the OSSF Scorecards project to report on the security posture of their project.