Eclipse Foundation Publishes Results of Equinox p2 Security Audit Mikaël Barbero 12 July 2023 Over the past year, the Eclipse Foundation has made securing the open source software supply chain a priority. By growing...
How to Report a Security Issue in an Eclipse Foundation Project? Marta Rybczynska 30 June 2023 Have you found something that looks like a security issue in an Eclipse Foundation project? Here is a description of...
Eclipse Foundation Default Security Tracker Moves! Marta Rybczynska 29 June 2023 Eclipse Foundation projects share a default way to report security issues. Security researchers and all concerned users can create private...
New SLSA++ Survey Reveals Real-World Developer Approaches to Software Supply Chain Security Mikaël Barbero 15 March 2023 Answering even basic questions about software supply chain security has been surprisingly hard. For instance, how widespread are the different...
March 2023 Update on Security improvements at the Eclipse Foundation Mikaël Barbero 3 March 2023 Thanks to financial support from the OpenSSF’s Alpha-Omega project, the Eclipse Foundation is glad to have made significant improvements in...
Shell Hole: How Advanced Prompts are Putting Software Developers at Risk Mikaël Barbero 1 March 2023 Advanced shell prompts, such as those provided by theme engines like oh-my-zsh and oh-my-posh, have become increasingly popular among software...
European Cyber Resilience Act: Potential Impact on the Eclipse Foundation Mike Milinkovich 15 January 2023 Europe has proposed new legislation intended to improve the state of cybersecurity for software and hardware products made available in...
Update on Security improvements at the Eclipse Foundation Mikaël Barbero 24 November 2022 Thanks to financial support from the OpenSSF’s Alpha-Omega project, the Eclipse Foundation is glad to have made significant improvements in...
Open Source Software Supply Chain Security starts with developers Mikaël Barbero 22 November 2022 Open Source Software Supply Chain is at risk: threat actors are shifting target to amplify the blast radius of their...
Enforcing HTTPS on the Eclipse Marketplace Mikaël Barbero 20 September 2022 As stewards of the Eclipse Marketplace, the Eclispe Foundation is responsible for providing a safe place for the Eclipse IDE...