#s2c2f — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #s2c2f, aggregated by home.social.
-
🎉【COSCUP 開源政策軌 議程集錦！】🎉
🔐【開源也有資安責任——企業治理與供應鏈安全專題】🔐
你知道你部署的每一個容器映像檔，平均預裝了多少個你的應用程式根本用不到的套件嗎？你知道歐盟《網路韌性法》（CRA）的漏洞通報義務即將在 2026 年 9 月生效嗎？
開源不是免費的午餐，它帶來自由，也帶來責任。🌐今年的開源政策軌，我們邀請到多位講者，從 AI 開源生態、電信雲供應鏈安全到企業開源治理框架，一次講清楚：
▸ From Code Contributor to Industry Power – How Open Source Becomes Taiwan’s AI Strategy
👤 Marie Gigarel（英文議程）
▸ Securing the Open Source Telco Cloud: SBOMs, Supply Chains, and Compliance at Scale
👤 Brian Su + Terry Shih（英文議程）
▸ 從 OpenSSF Scorecard 到 S2C2F，企業內部推動開源治理的實戰框架是什麼？
👤 Ryan Hsieh 謝文豪
▸ 開源是免費的嗎？從 CNCF 大使視角看人才、企業、政策三方困境
👤 梯口 tico88612
▸ 以 CRA 為例討論產品資安合規下的開源議題——法規來了，開源人準備好了嗎？
👤 李婉萍
▸ Your Container Images Are a Liability: The Supply Chain Debt Nobody Is Paying Down
👤 Hrittik Roy + Parth Goswami （英文議程）📅 8/8~8/9（日）10:00 起
📍 研陽大樓 TR209 教室（二樓）
完整議程：https://coscup.org/2026/track/526🌟 如果你在企業裡推動開源、負責資安合規、或關心 AI 生態系的未來，這天的場次是為你量身打造的！💬🤝
#COSCUP2026 #OCF #OpenSourcePolicy #開源政策 #OpenSource #SBOM #SupplyChainSecurity #CRA #OpenSSF #S2C2F #CNCF #企業開源 #供應鏈安全 #資安合規 #AI #FOSS #FLOSS #開源人年會 #TechEvent #Taiwan
-
If I could pick one software supply chain security thing for people to look at in the new year, it would be the Secure Supply Chain Consumption Framework. It describes in detail how to manage risk associated with software dependencies.
I consider this more important than SBOMs or SLSA.
Check it out! https://github.com/ossf/s2c2f
-
The Secure Supply Chain Consumption Framework (#S2C2F) provides a good overview of all measures to consider for your #SoftwareSupplyChain A helpful resource https://github.com/ossf/s2c2f/blob/main/specification/framework.md
-
@mastodon.social@kurtseifried mastodon.social@joshbressers I was listening to your episode "Joylynn Kirui from Microsoft on DevSecOps" E363
Instead of saying S-Two-C-Two-F why not say siiciif replacing the two with roman numerals II