OSC&R embraces GitHub: Will it move the needle on software supply chain security?

Microsoft's decision to open up the new Open Software Supply Chain Attack Reference (OSC&R) framework to the public on GitHub platform should improve the platform's effectiveness in protecting organizations from attackers, experts said in response to the move.

amp attack attackers decision dev & devsecops experts framework github microsoft organizations platform protecting public reference response security software software supply chain software supply chain attack software supply chain security supply supply chain supply chain attack supply chain security