Open Source Security Foundation

By Abby Kearns

Ask a security team what worries them about AI and you’ll probably hear about supply chain attacks or prompt injection first. The Linux Foundation’s new report, State of AI Impact on Software Security and Cyberse...

Broadened AI security guidance, relationships, and research to help close the gap between AI-driven development and software security

Summary:

Getting software into the airgap is still more work than it should be. You need the application, the dependencies, all of the provenance and signatures, plus a way to deploy and update it that doesn’t involve discovering that an installer needs internet access at the worst possible time.

That’s the problem Defense Unicorns built

As the open source ecosystem scales at an unprecedented rate, security is no longer an afterthought or an added burden; it is an essential, proactive guardrail built directly into the software development lifecycle. At OpenSSF Community Day Europe 2026 in Prague, more than 200 attendees gathered onsite as practitioners, maintainers, policymakers, and security leaders came tog...

Cross-post originally published on the Sylva blog written by François-Régis Menguy and Louise Grosset

Sylva’s security work leans heavily on the OpenSSF ecosystem. We started with supply chain to...