Join us

ContentUpdates from The Open Source Security Foundation (OpenSSF) is a...
 Activity
@nelly96 added a new tool GPTHuman , 1 month ago.
Story
@laura_garcia shared a post, 1 month ago
Software Developer, RELIANOID

Want to deploy RELIANOID Load Balancer Enterprise Edition v8 on AWS using Terraform in a clean, automated way?

We’ve got you covered. In this step-by-step guide, you’ll learn how to: Use the official Terraform module from the Terraform Registry Automatically provision VPC, subnet, security groups, and EC2 Deploy the RELIANOID Enterprise Edition AMI Access the VM via SSH and Web GUI Easily destroy all resourc..

terraform_relianoid_enterprise_img2
Story Keploy Team Trending
@sancharini shared a post, 1 month ago

Interpreting Software Testing Metrics Beyond Dashboards

Learn how to interpret software testing metrics beyond dashboards, turning raw data into actionable insights that improve release decisions and reduce risk.

Interpreting Software Testing Metrics Beyond Dashboards
Story
@idjuric660 shared a post, 1 month ago
Technical Content Writer, Mailtrap

5 Best Email API for Python Developers Tested & Compared

The best email APIs for Python developers are Mailtrap, Mailgun, SendGrid, Amazon SES, and Postmark. SDK quality & framework compatibility All five providers offerPythonSDKs and they’re compatible with popular frameworks. I tested each withDjango,Flask, and FastAPI to assess real-world integration. ..

 Activity
@jordanunix created an organization DevOpsDayLA , 1 month, 1 week ago.
Story
@laura_garcia shared a post, 1 month, 1 week ago
Software Developer, RELIANOID

💡 Third-Party Vendors: The Hidden Cybersecurity Risk

In today’s hyper-connected world, digital supply chains are only as secure as their weakest link. One single vendor can open the door to ransomware, outages, or worse. At RELIANOID, we take this risk seriously. 🔒 That’s why we apply: ✅ Continuous vendor risk assessments ✅ Real-time monitoring of thi..

cropped-Blog-THIRD-PARTY-VENDOR-RISKS-RELIANOID
Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

Unconventional PostgreSQL Optimizations

PostgreSQL 18 now supportsvirtual generated columns, indexable expressions without burning storage. Perfect for standardizing queries in analytics-heavy pipelines. Pair that withplanner constraint exclusion(constraint_exclusion=on), and Postgres can dodge irrelevant table scans based on constraints... read more  

Unconventional PostgreSQL Optimizations
Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

Software engineering when machine writes the code

In 1968, computer scientists identified the "software crisis" - the existing methods of programming were struggling to handle the power of computers. Today, AI coding assistants are accelerating productivity, but concerns arise about understanding the code they generate, the implications for debuggi.. read more  

Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

The challenges of soft delete

"Soft delete" sounds gentle. It isn't. Slapping adeleted_atcolumn on every table pollutes queries, drags down migrations, and leaves tombstones all over production. This post digs into saner options:PostgreSQL triggers,event archiving in the app layer, andCDC via WAL. Each separates the dead stuff f.. read more  

Link
@varbear shared a link, 1 month, 1 week ago
FAUN.dev()

How I Taught GitHub Copilot Code Review to Think Like a Maintainer

Vibe coding has made contributing to open source easier, but the high number of contributions to the AI agent framework goose has posed a challenge. An AI Code Review agent like Copilot can help review PRs, but tuning its feedback is crucial for reducing noise and increasing value. By providing clea.. read more  

The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.