iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
At OpenSSF Day Japan in Tokyo on December 4, 2023, the Open Source Security Foundation (OpenSSF) announced three new general members—Patchstack, SparkFabrik and TestifySec—and one new associate member, ISC2. The event also marked the release of OpenSSF’s Secure Software Development Guiding Principles and two Japanese-translated security guides. OpenSSF reported 120 members at the end of 2023; that is a historical figure, not a current membership count.
Which organizations joined OpenSSF?
OpenSSF announced four additions across two membership categories at its December 4, 2023, Tokyo event:
| Organization | Membership category | What its representative emphasized |
|---|---|---|
| Patchstack | General member | Co-Founder and CEO Oliver Sild described the company’s open-source vulnerability intelligence and the Patchstack Alliance bug-hunting community. |
| SparkFabrik | General member | CTO and co-founder Paolo Mainardi highlighted its cloud-native and open-source focus, including interest in software supply-chain security practices. |
| TestifySec | General member | Director of Open Source John Kjell said the company had contributed to OpenSSF technical initiatives and welcomed shared methods and tools. |
| ISC2 | Associate member | CEO Clar Rosso connected secure open-source code with developer education and training. |
These descriptions reflect statements from the organizations and their representatives in OpenSSF’s announcement; they are not independent evaluations of the organizations’ products or services. OpenSSF General Manager Omkhar Arasaratnam welcomed the new members, saying, “Securing open source software is a formidable task, and we look forward to their partnership.” OpenSSF’s December 4, 2023 announcement also said the foundation had 120 members at the end of that year.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWhat are the Secure Software Development Guiding Principles?
OpenSSF presented the principles as foundational practices for software producers and suppliers to use across the development lifecycle to improve software assurance and security. Organizations can pledge to align with the practices. The announcement does not give the principles’ full text, a count, or a version number, so those details should not be inferred from the release. Consult the announcement and its linked principles resource for the primary material before relying on particular requirements.
#1 Best Overall
- Used Book in Good Condition
What other guides did OpenSSF announce?
OpenSSF announced two guides translated into Japanese. They address different tasks:
| Guide | Purpose |
|---|---|
| Guide for open-source projects interested in issuing and managing their own CVE IDs through the CVE Numbering Authority (CNA) program | Explains a route for qualifying open-source projects to participate in CVE numbering and manage identifiers. |
| Compiler Options Hardening Guide for C and C++ | Helps developers select compiler options intended to harden software against memory-safety issues and other defects. |
The guides were introduced alongside the principles, but the announcement does not establish that either is a requirement of the principles or a membership benefit. Their scopes are distinct: one concerns CVE issuance and management, while the other concerns compiler configuration.
Rank #2
Where and when was OpenSSF Day Japan held?
The event took place in Tokyo on December 4, 2023, alongside Open Source Summit Japan. OpenSSF’s announcement described a program with more than 20 experts and sessions on exploited open-source vulnerabilities, malicious package repositories, software bill of materials (SBOM) policy for Japanese industry, and global collaboration. It also listed a panel on open source, open standards and government cybersecurity directives. A later OpenSSF event retrospective describes talks covering supply-chain security, secure coding, SLSA, Sigstore, SBOM generation, malicious packages and security advisories.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
