Assessing the Risk of Open-source Components Using OpenSSF's Scorecard

Explore the critical process of evaluating open-source component risks through OpenSSF's Scorecard in this informative 42-minute talk presented by Laurent Simon from Google and Naveen Srinivasan from Endor Labs at a Linux Foundation event. Gain valuable insights into the methodology and tools used to assess potential vulnerabilities and security concerns in open-source software, empowering developers and organizations to make informed decisions about the components they integrate into their projects.

Assessing the Risk of Open-source Components Using OpenSSF's Scorecard