Simplifying Coordinating Vulnerabilities & Disclosures in Open Source... - CRob & Madison Oliver
Channel: The Linux Foundation
Date: 2023-05-25

Simplifying Coordinating Vulnerabilities & Disclosures in Open Source Projects - CRob, Intel & Madison Oliver, GitHub

As an open source maintainer or project contributor you wear a lot of hats. Some hats may be familiar (“tester”or “hacker”), while others may be alien and scary (such as coordinated vulnerability disclosure (CVD) ). Handling vulnerabilities can be some of the most stressful and unknown areas a developer might have to work with throughout their careers. The Open Source Security Foundation’s (OpenSSF) Vulnerability Disclosures Working Group is here to help! Decoding the mysteries and jargon that exists within the shadowy world of security researchers and security teams can be challenging, which is why the OpenSSF has created several useful guides to help assist open source developers to prepare for the day they get a vulnerability report from a stranger. Come learn about tools, templates, and best practices to make these interactions less stressful and more frictionless. So no matter what hat you like, the Vuln Disclosure working group has one that fits you!