Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →At OpenSSF Day Japan in Tokyo on December 4, 2023, the Open Source Security Foundation (OpenSSF) announced four new members, released its Secure Software Development Guiding Principles, and introduced two Japanese-translated security guides. The membership announcement named three general members—Patchstack, SparkFabrik and TestifySec—and associate member ISC2.
Which organizations joined OpenSSF?
OpenSSF announced the new members at its Tokyo event, held alongside Open Source Summit Japan. The organizations joined in two different categories:
As an Amazon Associate I earn from qualifying purchases.
| Organization | Membership category | What its representative highlighted |
|---|---|---|
| Patchstack | General member | Co-Founder and CEO Oliver Sild described the company’s open-source vulnerability intelligence and the Patchstack Alliance bug-hunting community. |
| SparkFabrik | General member | CTO and co-founder Paolo Mainardi highlighted the company’s cloud-native and open-source focus and interest in software supply-chain security practices. |
| TestifySec | General member | Director of Open Source John Kjell said the company had contributed to OpenSSF technical initiatives and welcomed shared methods and tools. |
| ISC2 | Associate member | CEO Clar Rosso connected secure open-source code with developer education and training. |
These descriptions reflect statements by the organizations and their representatives in OpenSSF’s December 4, 2023 announcement; they are not independent assessments of the members’ products or services.
What did OpenSSF announce about its Secure Software Development Guiding Principles?
OpenSSF said the principles provide foundational practices for software producers and suppliers seeking to improve software assurance and security throughout the development lifecycle. Organizations can pledge to align with the practices.
#1 Best Overall
- Used Book in Good Condition
The announcement summarizes their purpose but does not give the full text, enumerate the practices or identify a version number. For the individual requirements, consult the authoritative Secure Software Development Guiding Principles document rather than inferring details from the release.
What were the two Japanese-translated guides?
OpenSSF also introduced two guides in Japanese, each addressing a different task:
Rank #2
- CVE Numbering Authority guide: For open-source projects interested in issuing and managing their own CVE IDs through the CVE Numbering Authority (CNA) program.
- Compiler Options Hardening Guide for C and C++: Helps developers choose compiler options intended to harden software against memory-safety issues and other defects.
What was OpenSSF Day Japan?
The December 4, 2023 event took place in Tokyo alongside Open Source Summit Japan. OpenSSF reported that the program included more than 20 experts and covered exploited open-source vulnerabilities, malicious package repositories, software bill of materials (SBOM) policy for Japanese industry and global collaboration. A panel discussed open source, open standards and government cybersecurity directives.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteOpenSSF’s later event retrospective also describes sessions on supply-chain security, secure coding, SLSA, Sigstore, SBOM generation, malicious packages and security advisories.
How many members did OpenSSF report?
The announcement said OpenSSF ended 2023 with 120 members. That is a historical figure reported at the time, not a current membership count.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
