The Open Source Security Foundation (OpenSSF) on Feb. 25 released a three-tiered set of guidelines that aims for developers to build in a minimum level of security for open source Linux software. Dubbed "the Open Source Project Security Baseline (OSPS Baseline)," the project was developed with the understanding that attackers will always try to take advantage of open-source software to launch malicious supply chain attacks. “The OSPS Baseline sets a clear, necessary floor for open-source security,” said

See Full Story