How mature is your open-source risk management? S2C2F helps map out dependencies

The Secure Supply Chain Consumption Framework (S2C2F) from the Open Source Security Foundation (OpenSSF) is a useful resource for enterprise software teams addressing risks from open-source dependencies.

app sec & supply chain security dependencies enterprise enterprise software foundation framework management map open source open source security open source security foundation openssf resource risk risk management risks s2c2f secure supply chain security security foundation software supply supply chain teams the open source security foundation