#ossra — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #ossra, aggregated by home.social.
-
RE: https://mastodon.social/@FreeBSDFoundation/116676767603367392
2026 Open Source Security and Risk Analysis Report – Software Governance in the AI Era – Black Duck Software, Inc.
https://www.blackduck.com/content/dam/black-duck/en-us/reports/rep-ossra.pdf
― a direct link to the freely-available report that's mentioned in the joint statement from Apereo Foundation, Open Source Initiative (OSI), Open Source Technology Improvement Fund (OSTIF), and FreeBSD Foundation.
"The “Open Source Security and Risk Analysis” (OSSRA) report has been the industry’s definitive look at the state of open source code for a decade. Each year, we analyze anonymized findings from commercial codebases audited by the Black Duck Audit Services team, and this provides an unmatched, real-world view of how open source is used—and sometimes misused—across every major industry. This year’s findings document a pivotal moment: The explosion of AI-assisted development has fundamentally altered the risk landscape for software and the baseline for compliance with new regulatory initiatives such as the EU Cyber Resilience Act (CRA) and the Digital Operational Resilience Act (DORA). …"
-
RE: https://mastodon.social/@FreeBSDFoundation/116676767603367392
2026 Open Source Security and Risk Analysis Report – Software Governance in the AI Era – Black Duck Software, Inc.
https://www.blackduck.com/content/dam/black-duck/en-us/reports/rep-ossra.pdf
― a direct link to the freely-available report that's mentioned in the joint statement from Apereo Foundation, Open Source Initiative (OSI), Open Source Technology Improvement Fund (OSTIF), and FreeBSD Foundation.
"The “Open Source Security and Risk Analysis” (OSSRA) report has been the industry’s definitive look at the state of open source code for a decade. Each year, we analyze anonymized findings from commercial codebases audited by the Black Duck Audit Services team, and this provides an unmatched, real-world view of how open source is used—and sometimes misused—across every major industry. This year’s findings document a pivotal moment: The explosion of AI-assisted development has fundamentally altered the risk landscape for software and the baseline for compliance with new regulatory initiatives such as the EU Cyber Resilience Act (CRA) and the Digital Operational Resilience Act (DORA). …"
-
What a decade of data tells us about the state of open source security, via @TechRadar. #OpenSource #CyberSecurity #OSSRA #Tech #Technology https://flip.it/ITrry9
-
What a decade of data tells us about the state of open source security, via @TechRadar. #OpenSource #CyberSecurity #OSSRA #Tech #Technology https://flip.it/ITrry9
-
🚀 A decade of OSSRA reveals how open source has transformed software development! From 35% to 70% open source code in apps, vulnerabilities have surged too-154 per app on average in 2025. Managing security & licenses is now mission-critical. Dive into the data & future challenges here: https://www.techradar.com/pro/ten-years-of-ossra-what-a-decade-of-data-tells-us-about-the-state-of-open-source-security 🔐💻 #OpenSource #Cybersecurity #OSSRA #DevSecOps #SoftwareSecurity #TechTrends #newz
-
🚀 A decade of OSSRA reveals how open source has transformed software development! From 35% to 70% open source code in apps, vulnerabilities have surged too-154 per app on average in 2025. Managing security & licenses is now mission-critical. Dive into the data & future challenges here: https://www.techradar.com/pro/ten-years-of-ossra-what-a-decade-of-data-tells-us-about-the-state-of-open-source-security 🔐💻 #OpenSource #Cybersecurity #OSSRA #DevSecOps #SoftwareSecurity #TechTrends #newz
-
Report from Black Duck shows unmanaged open source components pose serious security risks
https://www.admin-magazine.com/News/Unmanaged-Open-Source-Components-Pose-Serious-Risks-Says-Black-Duck-Report?utm_source=SM
#BlackDuck #security #OpenSource #OSSRA #vulnerabilities #license #compliance #FOSS -
Report from Black Duck shows unmanaged open source components pose serious security risks
https://www.admin-magazine.com/News/Unmanaged-Open-Source-Components-Pose-Serious-Risks-Says-Black-Duck-Report?utm_source=SM
#BlackDuck #security #OpenSource #OSSRA #vulnerabilities #license #compliance #FOSS -
2023 Open Source Security and Risk Analysis report from @SynopsysAppsec recommends SBOMs to fight against software supply chain attacks https://www.fosslife.org/2023-synopsys-report-emphasizes-need-sboms #security #Software #SupplyChain #SBOM #OSSRA #licensing #research
-
2023 Open Source Security and Risk Analysis report from @SynopsysAppsec recommends SBOMs to fight against software supply chain attacks https://www.fosslife.org/2023-synopsys-report-emphasizes-need-sboms #security #Software #SupplyChain #SBOM #OSSRA #licensing #research
-
Open Source Security and Risk Analysis report from #Synopsys shows "alarming" increase in high-risk vulnerabilities https://www.admin-magazine.com/News/Synopsys-Report-Shows-Alarming-Increase-in-High-Risk-Vulnerabilities #security #SBOM #OSSRA #IoT #OpenSource #ecommerce #aerospace #aviation #transportation #automotive #logistics
-
Open Source Security and Risk Analysis report from #Synopsys shows "alarming" increase in high-risk vulnerabilities https://www.admin-magazine.com/News/Synopsys-Report-Shows-Alarming-Increase-in-High-Risk-Vulnerabilities #security #SBOM #OSSRA #IoT #OpenSource #ecommerce #aerospace #aviation #transportation #automotive #logistics
-
Open source is everywhere, which means security risk is too.⚠️
Download the 2023 #OSSRA report to learn this year's key findings and how these risks can impact your organization: https://bit.ly/3SoiMAN
-
Open Source Security Report: Tim Mackey discusses growing vulnerability issues around the use of improperly updated open source components https://buff.ly/2Qz5mGg #security #open source #code #Synopsys #SoftwareDevelopment #SBOM #OSSRA
