Versions Compared

Old Version 27

changes.mady.by.user Unknown User (mjc)

Saved on

compared with

New Version 28

changes.mady.by.user Unknown User (markt)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

WH Theme: Preventing Defects

  • Look again into SCR:CLR as a service to projects. Done. Rejected for various reasons.
  • Make sure our projects are keeping track of their dependencies, especially things that are EOL, especially things that are other Apache projects and EOL (example log4j v1)
    • Track the dependencies across our projects so we can see the combined-graph for the latest version of each ASF project. Work centrally to encourage that dependencies are not insecure, or excessively dated.
  • Facilitate direct funding efforts such as TideLift which provide direct financial support for developers to focus on matters such as security
  • How does OpenSSF Alpha and/or Omega fit with ASF
  • Look at the sponsored SOS rewards program
  • Looks at OpenSSF OSS Fuzz. See also mail from GOSST

...