Session: A Maintainer-First Approach to Open Source Security

Our favorite platforms to write and share code, such as GitHub, GitLab, or Bitbucket, empower maintainers and contributors to efficiently collaborate on open source projects.

However, these platforms don’t always feel adequate when dealing with security bugs. Correcting security flaws is a sensitive process. Creating a public issue or pull request about a vulnerability could expose users to attacks.

Furthermore, funding, missing knowledge, and misaligned incentives are common challenges that hinder collaboration between open source maintainers and security researchers.

This session will discuss the best tools and practices that can help bring two communities to communicate and collaborate better.

Session Speakers:

Nancy Gariché

Nancy is a Senior Developer Advocate for the GitHub Security Lab, where she helps security researchers and developers collaborate and communicate better. In her spare time co-leads the OWASP DevSlo [Read More]

This track
proudly sponsored by