kimsterv

4 ms·

1. 1.▲
   by kimsterv 4y ago

   Def check out the gitsign project mentioned in the post: https://github.com/sigstore/gitsign
2. 2.▲
   Measuring security risks in open source software(security.googleblog.com)

   57 points by kimsterv 5y ago|3 comments
3. 3.▲
   by kimsterv 6y ago

   Honk! I represent Google on the OpenSSF, and help lead our Google Open Source Security Team. We've kicked off several projects inside the OpenSSF, and contribute to several other related efforts. Here's a non-exhaustive list: Secu
4. 4.▲
   by kimsterv 6y ago

   Unfortunately, the openssf members haven’t come to consensus on the process for handling funding requests and the process. We’ll get there (hopefully!) but it’s looking like it’s going to take more time. -Sincerely, Google’s OpenSSF govern
5. 5.▲
   by kimsterv 6y ago

   Dan’s the best. We work together, and we’re hiring. I’m biased but I think we have the most fun at Google. :)
6. 6.▲
   by kimsterv 6y ago

   there's an open issue related to this: https://github.com/ossf/scorecard/issues/27