KubeCon + CloudNativeCon Europe · Apr 1-4 · London REGISTER TODAY

Leading Global Open Source Stewardship and Compliance for Cybersecurity and Emerging Regulations

AdobeStock_914761388

The Linux Foundation provides support to open source communities, helping stewards and manufacturers navigate regulations like the CRA, ensuring open source software meets requirements and continues to drive secure global innovation

Pathways to Cybersecurity Best Practices in Open Source

This case study report from the Linux Foundation investigates the impacts of the Cyber Resilience Act on open source software, including new cybersecurity obligations and the role of manufacturers and stewards.

Web Assets_Pathways to Cybersecurity Best Practices in Open Source_2025 Report_Thumbnail_Cover

Unaware and Uncertain: The Stark Realities of Cyber Resilience Act Readiness in Open Source

This survey-based report investigates the awareness and readiness of the open source community to comply with the EU's Cyber Resilience Act (CRA). The report reveals significant knowledge gaps in the open source ecosystem that must be addressed to adequately comply with the new regulation while maintaining sustainable open source development.

Web Assets_Unaware and Uncertain_2025 Report_Thumbnail_Cover

The potential impact of the EU Cyber Resilience Act on open source development and contribution.

Panel Discussion: The Impact of the CRA on the Open Source Ecosystem - Cheukting Ho, Python Software Foundation; Mirko Boehm & Greg Kroah Hartman, The Linux Foundation; Laura Seay, Red Hat; Justin Colannino; GitHub; Philip Robb, Ericsson

CRA Resources

Join the OpenSSF Global Cyber Policy Working Group

Inquiries