CISA
software supply chain
openssf
package manager
News
How secure is your package repo? CISA defines four levels of security maturity, starting at zero
"Package managers are at a critical point in the open source ecosystem and have the capability to scale security improvements across open source ecosystems"
Interviews
cybersecurity
Big Interview
The Big Interview: CISA’s $7 billion CDM program aims to run pan-federal cybersecurity. Is it delivering?
"We have gotten very smart on how to do business with agencies and build in flexibility into our contracting vehicles. We took an approach early on to divide and conquer..."