The Linux Foundation Member Summit

Open source software is ubiquitous and forms the backbone of modern digital infrastructure, yet it often hides dependency risks that can impact organizations significantly. At GitHub, where we depend on tens of thousands of open source packages, we have leveraged open source frameworks from OpenSSF and other communities and created strategies to assess and mitigate these risks. Join us as we explore how OSPOs can use open source tools and standards to create plans for identifying and addressing dependency risks to improve their overall risk profile and improve project health. The talk will cover strategies for engaging with key stakeholders, including security teams, and funding opportunities to build resilient and sustainable open source ecosystems.