Google releases new open-source security software program: Scorecards
Scorecards 2.0 , Google's new open-source security software program, can quickly tell you just how secure - or insecure - open-source software really is.
We have thousands of posts on a wide variety of open source and security topics, conveniently organized for searching or just browsing.
Scorecards 2.0 , Google's new open-source security software program, can quickly tell you just how secure - or insecure - open-source software really is.
Google recognizes that before you can understand something, you need to measure it, and is bringing a way to measure security errors across open-source software programs.
The Internet Security Research Group - backed by Google's financial support - has provided prominent developer Miguel Ojeda with a one-year contract to work on Rust in Linux and other security efforts full-time.
To tackle the growing threat of attacks on the software supply chain, Google has proposed the Supply chain Levels for Software Artifacts framework, or SLSA which is pronounced "salsa". Can Google's 'salsa' make life harder for supply chain attackers? Comment below - we want to hear what you think!
As the Linux Foundation's Zephyr Project celebrates its fifth anniversary, it has become apparent that addressing constrained device security challenges is more critical than ever. Luckily, the Zephyr Project is rising to meet these challenges. Learn how.
Cockpit is a beginner friendly web-based Linux server manager that lets you manage a remote Linux system through a browser window. With Cockpit, you can view system log entries, monitor network activity, start and stop services, and more! Learn more about this useful app and how to install it on Linux.