How to trust open source software: A conversation with OpenSSF's Naveen Srinivasan

For software engineers to keep up with the pace of software delivery in the world of continuous delivery/continuous integration (CI/CD), they rely on open source codebases to meet deadlines and create a quality product. But while open source code is essential to developers — it has also become a major problem for secure software development.

code continuous continuous integration conversation delivery developers engineers integration open source openssf podcasts product quality rsac2023 software software engineers software supply chain security source code trust world