How to trust open source software: A conversation with OpenSSF's Naveen Srinivasan

For software engineers to keep up with the pace of software delivery in the world of continuous delivery/continuous integration (CI/CD), they rely on open source codebases to meet deadlines and create a quality product. But while open source code is essential to developers — it has also become a major problem for secure software development.

The Synopsis 2021 Open Source Security and Risk Analysis Report found that 84% of all scanned codebases have at least one software vulnerability, with an …

code continuous continuous integration conversation delivery developers engineers integration open source openssf product quality software software engineers source code trust world