Open Source Summit + ELC North America 2020

At first glance, security teams and open source teams at companies seem to be at odds. Security is about locking down doors and securing infrastructure and open source makes apps more collaborative and transparent. So how can these two teams work better together?

This becomes important as companies scale their use and adoption of open source and contribute code back to upstream projects or release their new projects. Open Source Program Offices need to work more closely with their security teams to achieve both open and secure work. We will share some best practices we adopted at the Comcast Open Source Program Office and how we have learned to balance reducing friction to doing more open source with securing what we release. We want to ensure that we are contributing more secure open source and reducing risk to users and to contributors alike.