Session: A Maintainer-First Approach to Open Source Security
Our favorite platforms to write and share code, such as GitHub, GitLab, or Bitbucket, empower maintainers and contributors to efficiently collaborate on open source projects.
However, these platforms don’t always feel adequate when dealing with security bugs. Correcting security flaws is a sensitive process. Creating a public issue or pull request about a vulnerability could expose users to attacks.
Furthermore, funding, missing knowledge, and misaligned incentives are common challenges that hinder collaboration between open source maintainers and security researchers.
This session will discuss the best tools and practices that can help bring two communities to communicate and collaborate better.