undefined | Better HN

0 pointstranspute3y ago0 comments

OMG :) OpenSSF will love that story! Straight into the documentation Hall of Fame.

They can check out the Securing Critical Projects working group, https://github.com/ossf/wg-securing-critical-projects

0 comments

1 comments · 1 top-level

Tomte3y ago

They link to that page in their documentation.

I can only assume that they misunderstand this:

> 1. Identify critical open source software (OSS) projects.

> 2. Secure those projects.

Not as "those projects are widely in use, we should really make sure that they are looked at", but as "we have identified those projects as insecure and will secure them".

j / k navigate · click thread line to collapse