|a Futurum companyCoverage
Cloud NativeCI/CDDevSecOpsPlatform EngineeringDataOpsContinuous TestingLow-Code / No-CodeIT as CodeEnterprise DevOpsMedia
Techstrong TV LiveVideo InterviewsTech Field DayTechstrong GangAgents of DevSecurity BoulevardCloud Native NowDigital CxO
Contributing Writer
Abhishek Arya is a Principal Engineer and head of the Google Open Source Security Team. His team has been a key contributor to various security engineering efforts inside the Open Source Security Foundation (OpenSSF). This includes the Supply Chain Security Framework and Tools (SLSA, Sigstore), Security Risk Measurement Platform (Scorecards, AllStar), Vulnerability Management Solutions (OSV) and Package Analysis pipeline. Prior to this, he was a founding member of the Google Chrome Security Team and built OSS-Fuzz, a highly scaled and automated fuzzing infrastructure that fuzzes all of Google and open source.
Measuring and mitigating the security risks in open source software is becoming a major issue in the software development community. Attacks on open source software (OSS) are on the rise; open source supply chain attacks grew 650% in 2021—a staggering number. 2021 and early 2022 saw significant attacks which impacted more than 1,000 organizations. The […]
Mar 17, 2022 · 3 min