{"id":90638,"date":"2020-08-04T01:42:20","date_gmt":"2020-08-03T23:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uchrezhdyon-proekt-openssf-sfokusirovannyj-na-povyshenii-bezopasnosti-otkrytogo-po"},"modified":"2020-08-04T01:42:20","modified_gmt":"2020-08-03T23:42:20","slug":"uchrezhdyon-proekt-openssf-sfokusirovannyj-na-povyshenii-bezopasnosti-otkrytogo-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/uchrezhdyon-proekt-openssf-sfokusirovannyj-na-povyshenii-bezopasnosti-otkrytogo-po","title":{"rendered":"Le projet OpenSSF a \u00e9t\u00e9 cr\u00e9\u00e9, ax\u00e9 sur l'am\u00e9lioration de la s\u00e9curit\u00e9 des logiciels open source","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Organisation Linux Foundation <noindex><a rel=\"nofollow\" href=\"https:\/\/www.linuxfoundation.org\/press-release\/2020\/08\/technology-and-enterprise-leaders-combine-efforts-to-improve-open-source-security\/\">a annonc\u00e9<\/a><\/noindex> sur la cr\u00e9ation d'un nouveau projet collaboratif <noindex><a rel=\"nofollow\" href=\"https:\/\/openssf.org\/\">OpenSSF<\/a><\/noindex> (Open Source Security Foundation), qui vise \u00e0 rassembler le travail des principaux acteurs de l'industrie pour am\u00e9liorer la s\u00e9curit\u00e9 des logiciels open source. OpenSSF continuera de d\u00e9velopper des initiatives telles que  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=39635Core\">Infrastructure Initiative<\/a><\/noindex> et <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51867\">Open Source Security Coalition<\/a><\/noindex>, et rassemblera \u00e9galement d'autres travaux li\u00e9s \u00e0 la s\u00e9curit\u00e9 entrepris par les participants du projet.<\/p>\n<p>Parmi les fondateurs de OpenSSF figurent des entreprises telles que <noindex><a rel=\"nofollow\" href=\"https:\/\/github.blog\/2020-08-03-github-joins-the-open-source-security-foundation\/\">GitHub<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/opensource.googleblog.com\/2020\/08\/google-joins-open-source-security.html\">Google<\/a><\/noindex>, IBM, JPMorgan Chase, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.microsoft.com\/security\/blog\/2020\/08\/03\/microsoft-open-source-security-foundation-founding-member-securing-open-source-software\/\">par Microsoft<\/a><\/noindex>, NCC Group, OWASP Foundation et Red Hat. Des entreprises comme GitLab, HackerOne, Intel, Uber, VMware, ElevenPaths, Okta, Purdue, SAFECode, StackHawk et Trail of Bits ont rejoint le projet en tant que participants.<\/p>\n<p>Il est \u00e0 noter qu'aujourd'hui, les logiciels open source sont largement demand\u00e9s dans de nombreux domaines de l'industrie, mais en raison de la sp\u00e9cificit\u00e9 de leur d\u00e9veloppement, leur s\u00e9curit\u00e9 est influenc\u00e9e par des cha\u00eenes de d\u00e9pendances et les participants au d\u00e9veloppement. Par cons\u00e9quent, pour confirmer la s\u00e9curit\u00e9 des projets ouverts, il est important de v\u00e9rifier non seulement le code principal, mais aussi les d\u00e9pendances, ainsi que d'identifier les d\u00e9veloppeurs dont le code est int\u00e9gr\u00e9 au projet et d'assurer une authentification fiable lors des examens et des commits. De plus, pour garantir la s\u00e9curit\u00e9, il est n\u00e9cessaire d'utiliser des syst\u00e8mes de construction s\u00e9curis\u00e9s et de v\u00e9rifier les constructions. <\/p>\n<p>Le travail de OpenSSF se concentrera sur des domaines tels que la coordination <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossf\/wg-vulnerability-disclosures\">la divulgation<\/a><\/noindex> des informations sur les vuln\u00e9rabilit\u00e9s et la diffusion de correctifs, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossf\/wg-security-tooling\">d\u00e9veloppement<\/a><\/noindex> des outils pour assurer la s\u00e9curit\u00e9, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossf\/wg-best-practices-os-developers\">publication<\/a><\/noindex> les meilleures pratiques pour une organisation de d\u00e9veloppement s\u00e9curis\u00e9e, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossf\/wg-identifying-security-threats\">d\u00e9tection<\/a><\/noindex> les menaces li\u00e9es \u00e0 la s\u00e9curit\u00e9 dans les logiciels open source,  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossf\/wg-securing-critical-projects\">r\u00e9alisation<\/a><\/noindex> les travaux d'audit et de renforcement de la s\u00e9curit\u00e9 des projets open source critiques, la cr\u00e9ation de moyens pour v\u00e9rifier <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ossf\/wg-developer-identity\">l'identit\u00e9 des d\u00e9veloppeurs<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53482\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f Linux Foundation \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenSSF (Open Source Security Foundation), \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e. OpenSSF \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432, \u043a\u0430\u043a Infrastructure Initiative \u0438 Open Source Security Coalition, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0431\u043e\u0442\u044b, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0447\u0438\u0441\u043b\u043e \u0443\u0447\u0440\u0435\u0434\u0438\u0442\u0435\u043b\u0435\u0439 OpenSSF [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-90638","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f Linux Foundation\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/uchrezhdyon-proekt-openssf-sfokusirovannyj-na-povyshenii-bezopasnosti-otkrytogo-po\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0447\u0440\u0435\u0436\u0434\u0451\u043d \u043f\u0440\u043e\u0435\u043a\u0442 OpenSSF, \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f Linux Foundation\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/uchrezhdyon-proekt-openssf-sfokusirovannyj-na-povyshenii-bezopasnosti-otkrytogo-po\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-03T23:42:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-03T23:42:20+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Le projet OpenSSF a \u00e9t\u00e9 cr\u00e9\u00e9, se concentrant sur l'am\u00e9lioration de la s\u00e9curit\u00e9 des logiciels open source | ProHoster","description":"Organisation Linux Foundation","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uchrezhdyon-proekt-openssf-sfokusirovannyj-na-povyshenii-bezopasnosti-otkrytogo-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0447\u0440\u0435\u0436\u0434\u0451\u043d \u043f\u0440\u043e\u0435\u043a\u0442 OpenSSF, \u0441\u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e | ProHoster","og:description":"\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f Linux Foundation","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uchrezhdyon-proekt-openssf-sfokusirovannyj-na-povyshenii-bezopasnosti-otkrytogo-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-03T23:42:20+00:00","article:modified_time":"2020-08-03T23:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"90638","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:45:33","updated":"2022-09-30 11:51:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/90638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=90638"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/90638\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=90638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=90638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=90638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}