How Do You Trust Open Source Software?

The OpenSSF Scorecard is an automated tool that assesses several important heuristics ("checks") associated with software security and assigns each check a score of 0-10. These scores help developers understand specific areas to improve to strengthen the security posture of a dependency. This session will discuss projects like the Eclipse Foundation, enoyproxy, and tensorflow use Scorecard.