OpenSSF (Open Source Security Foundation) idayambitsa ntchito ya Alpha-Omega, yomwe cholinga chake ndi kukonza chitetezo cha mapulogalamu otseguka. Ndalama zoyambira zopangira pulojekitiyi zokwana madola 5 miliyoni komanso ogwira ntchito kuti akhazikitse ntchitoyi adzaperekedwa ndi Google ndi Microsoft. Mabungwe ena amalimbikitsidwanso kutenga nawo gawo, popereka talente yaukadaulo komanso pamlingo wandalama, zomwe zithandizire kukulitsa kuchuluka kwa mapulojekiti otseguka omwe adzachitike ndi ntchitoyi. Kuphatikiza apo, kumapeto kwa chaka chatha, $ 10 miliyoni idaperekedwa kuti igwire ntchito ya OpenSSF Foundation; ngati ndalamazi zidzagwiritsidwa ntchito pa Alpha-Omega sizinatchulidwe.
Pulojekiti ya Alpha-Omega ili ndi zigawo ziwiri:
- Gawo la Alpha limakhudzanso kuwunika kwachitetezo pamanja pama projekiti 200 omwe amagwiritsidwa ntchito kwambiri, omwe amagwiritsidwa ntchito kwambiri powagwiritsa ntchito potengera kudalira kapena zida zogwirira ntchito. Ntchitoyi idzachitidwa mogwirizana ndi osamalira ndipo idzaphatikizapo kusanthula mwadongosolo kachidindo kuti azindikire zofooka zatsopano ndikuzikonza mwamsanga.
- Gawo la Omega limayang'ana kwambiri pakuyesa ma projekiti 10 zikwizikwi odziwika bwino. Gulu lina la mainjiniya lidzapangidwa kuti liziyesa, kukonza njira zomwe zimagwiritsidwa ntchito, kusanthula zotsatira za mayeso, kufotokozera zambiri kwa omwe akupanga polojekiti ndikugwirizanitsa mgwirizano kuti athetse mavuto akulu. Ntchito yaikulu ya gululi idzakhala kukana zolakwa zabodza ndikuzindikira zofooka zenizeni mu malipoti odzipangira okha.
Kufunika kowunikira pamanja pa gawo la Alpha ndi chifukwa chofuna kuzindikira zovuta zobisika zomwe zimakhala zovuta kuzizindikira panthawi yoyeserera. Monga chitsanzo cha zovuta zotere, zofooka zaposachedwa kwambiri mu Log4j zimatchulidwa, zomwe zidayika pachiwopsezo zomangamanga zamakampani akuluakulu. Ntchito zowunika zidzasankhidwa potengera malingaliro a akatswiri komanso deta yochokera ku Critical Score ndi Census yomwe idapangidwa kale.
Monga chikumbutso, OpenSSF idapangidwa motsogozedwa ndi Linux Foundation ndipo imayang'ana kwambiri ntchito m'malo monga kuwululidwa kwachiwopsezo, kugawa zigamba, kukonza zida zachitetezo, kusindikiza njira zabwino zopangira chitukuko chotetezeka, kuzindikira ziwopsezo zachitetezo mu pulogalamu yotseguka, kugwira ntchito yowunikira ndi kulimbikitsa chitetezo cha mapulojekiti otseguka, kupanga zida zotsimikizira kuti omwe akutukula ndi ndani. OpenSSF ikupitiliza kupanga zoyeserera monga Core Infrastructure Initiative ndi Open Source Security Coalition, ndikuphatikizanso ntchito zina zokhudzana ndi chitetezo zomwe makampani omwe adalowa nawo ntchitoyi. Makampani oyambitsa OpenSSF akuphatikizapo Google, Microsoft, Amazon, Cisco, Dell Technologies, Ericsson, Facebook, Fidelity, GitHub, IBM, Intel, JPMorgan Chase, Morgan Stanley, Oracle, Red Hat, Snyk ndi VMware.
Source: opennet.ru