Live and recent posts from across the Fediverse tagged #cramondays, aggregated by home.social.
This team analysed over 350 organisations and 3,600 repositories within #EclipseFdn projects to learn whether their #CyberResilienceAct compliance solution could be applied to a large #OpenSource organisation.
Tune in to our latest edition of #CRAMondays to hear Martin von Willebrand (Double Open) and Sebastien Heurtematte (Eclipse Foundation) present the latest results from OCCTET.
📺 Watch the full session on our new YouTube channel: https://youtu.be/KN3dKD38S9U?si=OXtwkAzYTsUXd4u8
This might be the solution to automating #CyberResilienceAct compliance at scale. ⚙️
This #CRAMondays session, presented by Martin von Willebrand (Double Open) and Sebastien Heurtematte (@EclipseFdn) features key findings from an analysis of #OpenSource projects across technology ecosystems and compares ORT Server results with GitHub advisory data, highlighting differences in coverage and vulnerability detection.
📺 Watch the full session on YouTube: https://youtu.be/KN3dKD38S9U?si=OXtwkAzYTsUXd4u8
What did Log4Shell teach us about securing open source?
Join the ORC WG on Monday to explore the lessons from Log4Shell and what a CRA-ready Log4j looks like.
📆 March 16 at 12 pm EDT
➕ Add to your calendar: https://buff.ly/GZ8m6Gv
Log4Shell revealed just how deeply open source runs through the global software supply chain—and how hard it can be to respond when a critical dependency fails.
Join the ORC WG for the next #CRAMondays to explore the lessons from Log4Shell and what it takes to build a CRA-ready Log4j.
📆 March 16 at 12 pm EDT
➕ Add to your calendar: https://bit.ly/3PuQozy
In this #CRAMondays session, we’ll hear directly from leaders shaping software transparency standards:
🎙 Steve Springett | Olle E Johansson | Philippe Ombredanne
Find out how Ecma and OWASP are creating practical solutions for secure, transparent supply chains.
💫 We know you love our #CRAMondays series - but we’re taking a break over the summer months.
No worries, you can catch up on the recordings of previous sessions, and stay informed on the latest CRA-related topics. Check out our full playlist to gain a deeper understanding of #CRA issues: https://www.youtube.com/playlist?list=PLy7t4z5SYNaT-DjqGR0ORSSZGZYW8qmRs
“If I learned something during the last two years, it was all because of my misconceptions that I had.”
Fukami's #CRAMondays talk is a must-watch for anyone navigating EU tech policy and the Cyber Resilience Act (#CRA).
Watch now to learn from his experience: https://youtu.be/7CbHwsKVD80
Trying to understand how the Cyber Resilience Act (#CRA) affects open source?
Fukami, EU Policy Advisor at the OpenSSF, shared at the #CRAMondays session a visual map of the landscape — regulations, actors, responsibilities — and how it all connects.
🎧 Watch the recording: https://youtu.be/7CbHwsKVD80
🗓️ Arnaud Le Hors will introduce the SLSA, its current status, and what’s in the works at the #CRAMondays session on 9 June at 5PM CEST.
SLSA is a security framework for describing and incrementally improving supply chain security, established by industry consensus within OpenSSF.
What is the New Legislative Framework (NLF), and how does it shape EU product legislation, including the Cyber Resilience Act (#CRA)?
In this episode of #CRAMondays, Fukami, EU Policy Advisor at the OpenSSF, breaks down the NLF as the legal backbone supporting the enforcement of internal market rules in the EU.
🎥 Watch the recording to get a clearer understanding of how the NLF provides a common framework for future legislation: https://youtu.be/7CbHwsKVD80
💬 “Tech isn't the hardest part. Trust is.”
In a #CRAMondays session, Olle E. Johansson shared that building a trusted global organisation is step one, and only then should we build the tech.
Want to learn more? Check out the recording! https://youtu.be/zSsGLJTgWvU
🔍 Missed the last #CRAMondays?
Olle E. Johansson joined us for a session on the state of vulnerability management and why the world needs a federated, open, and globally trusted alternative to the NVD.
🎥 Watch now! https://youtu.be/zSsGLJTgWvU
🗓️ The next edition of the #CRAMondays will take place online on 12 May!
We’re diving into the OWASP Software Assurance Maturity Model (SAMM) with Maxim Baele, a SAMM core team member who maintains the model.
Understanding how manufacturers implement the processes required to build products that are secure by design is essential to understanding how they will consider their due diligence requirements when ingesting #opensource components.
➕ Add to your calendar! https://calendar.google.com/calendar/u/0/r/eventedit/copy/NGo1YWhzZ3YydG1rb2dmZzVrcGcxZnEzdGpfMjAyNTA1MTJUMTUwMDAwWiBjXzdkYjhlM2YxM2M0ZmFjOTg0MTAzOTE4YTk3YzcwNGJiMWQ2MTlkYTBmZGI2NmQzM2YxNzQ3ODQ5YjYwMjBhZWFAZw
📆 Dive into the CRA with us on Monday, 28 April!
1️⃣ 3pm CEST — Unpacking the CRA: How the open source community is collaborating in the Open Regulatory Compliance WG to address the CRA.
🔗Registration is required: https://www.crowdcast.io/c/orc-28042025
2️⃣ 4pm CEST — Cyber Resilience SIG Call.
🔗https://calendar.google.com/calendar/u/0/r/eventedit/copy/Njg2Y2g0YmpoNzRocDQ5ZXVlZ2QzMjl1cWRfMjAyNTA0MjhUMTQwMDAwWiBjXzdkYjhlM2YxM2M0ZmFjOTg0MTAzOTE4YTk3YzcwNGJiMWQ2MTlkYTBmZGI2NmQzM2YxNzQ3ODQ5YjYwMjBhZWFAZw/bG91bmdvdW5hdGFsaWFAZ21haWwuY29t
3️⃣ 5pm CEST — #CRAMondays with Olle E Johansson.
🔗https://calendar.google.com/calendar/event?action=TEMPLATE&tmeid=NGo1YWhzZ3YydG1rb2dmZzVrcGcxZnEzdGpfMjAyNTA0MjhUMTUwMDAwWiBjXzdkYjhlM2YxM2M0ZmFjOTg0MTAzOTE4YTk3YzcwNGJiMWQ2MTlkYTBmZGI2NmQzM2YxNzQ3ODQ5YjYwMjBhZWFAZw&tmsrc=c_7db8e3f13c4fac984103918a97c704bb1d619da0fdb66d33f1747849b6020aea%40group.calendar.google.com
📲 Ready to join?
In our first edition of the #CRAMondays series, Sebastien Heurtematte provided an overview of OCCTET. The recording will be posted shortly.
In the meantime, check our ORC Community Calendar for the next CRA Monday sessions: