Security Principles

Open Source Software: Security Principles and Practices

CISA released new guidance called Open Source Software: Security Principles and Practices. The guidance helps government agencies use open source software safely. It explains how to manage risks, assess trust, and handle vulnerabilities throughout the software life cycle. It also covers software bills of materials and open source artificial intelligence systems.