GigaTap articles tagged OpenSSF.
- Skyway Model for OSS Security and Supply Chain Risk - OpenSSF Community Day 2026 reframes OSS security as a connected system problem across tooling, identity, and governance in the software supply chain.
- OpenSSF’s growth push meets CRA and AI security pressure - OpenSSF’s latest quarter is less a membership story than a sign of where open source security is moving: regulation, AI-assisted tooling, secure coding gui
- Open Source Security Needs More Than Code - An OpenSSF podcast episode shows why public learning, documentation, and community work are real supply chain security contributions.
- CRA readiness is becoming an open source supply-chain test - OpenSSF’s CRA warning points to a practical gap: teams need inventory, vulnerability handling, and clear responsibility for OSS in products.
- Air-Gapped Software Deployment: What Zarf Tries to Standardize - An OpenSSF podcast episode outlines Zarf’s goal: package images, charts, and supporting files into a transferable bundle for air-gapped environments—and us
- CPS Reached OpenSSF Gold: the practices behind the badge - CPS says it achieved OpenSSF Best Practices Gold by enforcing review gates, deep CI testing, and security-in-pipeline controls—and by pushing org-wide chan