# OpenSSF OSS Security Mobilization Plan

**URL:** <https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044>\
**Category:** 📣 Sustainer Talk\
**Created:** [May 18, 2022, 5:35pm UTC](https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044 "2022-05-18T17:35:27Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![anthonyronda](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/anthonyronda/32/616_2.png) [@anthonyronda](https://discourse.sustainoss.org/u/anthonyronda)\
**Post date:** [May 18, 2022, 5:35pm UTC](https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044/1 "2022-05-18T17:35:27Z")

</div>

> **[Open Source Security Foundation (OpenSSF)](https://openssf.org/oss-security-mobilization-plan/)**
>
> Consolidating industry efforts to improve the security of open source software.

I believe the plan here was presented about a week ago at Open Source Software Security Summit II organized jointly by LF and OpenSSF.

> **[The Linux Foundation and Open Source Software Security Foundation (OpenSSF)...](https://www.linuxfoundation.org/press-release/linux-foundation-openssf-gather-industry-government-leaders-open-source-software-security-summit/)**
>
> The Linux Foundation and the Open Source Software Security Foundation (OpenSSF) brought together over 90 executives from 37 companies and government leaders from the NSC, ONCD, CISA, NIST, DOE, and OMB to to reach a consensus on key actions to take...

Which was timed together with Brian Behlendorf’s testimony to the US House Committee on Science and Technology on Securing the Digital Commons a day earlier.

> **[Testimony to the US House Committee on Science and Technology - Open Source...](https://openssf.org/blog/2022/05/11/testimony-to-the-us-house-committee-on-science-and-technology/)**
>
> We’re pleased to share that Brian Behlendorf, OpenSSF General Manager, testified to the United States House of Representatives Committee on Science, Space, and Technology today. Brian’s testimony shares the work...

---

<div class="post-metadata">

**Author:** ![benjam](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/benjam/32/310_2.png) [@benjam](https://discourse.sustainoss.org/u/benjam)\
**Post date:** [May 19, 2022, 11:19am UTC](https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044/2 "2022-05-19T11:19:11Z")

</div>

Thanks for sharing. I had an initial read through early this morning and have some responses but more importantly some work that’s related that I now need to announce!

---

<div class="post-metadata">

**Author:** ![jorydotcom](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/jorydotcom/32/441_2.png) [@jorydotcom](https://discourse.sustainoss.org/u/jorydotcom)\
**Post date:** [May 19, 2022, 2:50pm UTC](https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044/3 "2022-05-19T14:50:51Z")

</div>

👋 I’m the Program Director for OpenSSF, thank you for sharing this!

If anyone has questions about the OpenSSF, the mobilization plan, or the programs mentioned in these announcements please let me know, or [join the slack workspace](https://slack.openssf.org) to get involved with the workstreams!

---

<div class="post-metadata">

**Author:** ![abitrolly](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/abitrolly/32/845_2.png) [@abitrolly](https://discourse.sustainoss.org/u/abitrolly)\
**Post date:** [May 23, 2022, 5:50am UTC](https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044/4 "2022-05-23T05:50:04Z")

</div>

Why you don’t use Open Source platform for communication?

---

<div class="post-metadata">

**Author:** ![benjam](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/benjam/32/310_2.png) [@benjam](https://discourse.sustainoss.org/u/benjam)\
**Post date:** [June 1, 2022, 5:06pm UTC](https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044/5 "2022-06-01T17:06:42Z")

</div>

Hey @jorydotcom we’ve pushed forward our plans to talk openly about our work on Ecosyste.ms as a result of this announcement. You can read more at [Ecosyste.ms — Identify, Secure, and Sustain Critical, Open Source Components](https://blog.opencollective.com/ecosyste-ms-identify-secure-and-sustain-critical-open-source-components/)

@andrew and I are teaming up once again for this one, we’re incubating the project at Open Source Collective. Our project doesn’t yet bring in contribution from OSSF/LF members, which is rightly highlighted in the report. A conversation about how best to work together would be good given we have previous experience building the technology in the area and are a ways into development already would be great.

---

<div class="post-metadata">

**Author:** ![jorydotcom](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/jorydotcom/32/441_2.png) [@jorydotcom](https://discourse.sustainoss.org/u/jorydotcom)\
**Post date:** [June 1, 2022, 11:21pm UTC](https://discourse.sustainoss.org/t/openssf-oss-security-mobilization-plan/1044/6 "2022-06-01T23:21:51Z")

</div>

Interesting! We should find some time to talk more about the alignments here. Shall I email you to set a time? We’re traveling for a conference next week but second week of June would work well