Google sponsors pilot program to improve open source security

Google is announcing its sponsorship of the Secure Open Source (SOS) pilot program, run by the Linux Foundation, which financially rewards developers for enhancing the security of critical open source projects. Google is starting with a $1 million investment and plans to expand the scope of the program based on community feedback. SOS rewards a very broad range of improvements that proactively harden critical open source projects and support infrastructure against application and supply chain attacks. To complement existing programs that reward vulnerability management, SOS's scope is wider in the type of work it rewards in order to support project… [Continue Reading]