vECM - Someone reports a security issue in my project! Now what?

Subscribers:
24,000
Published on ● Video Link: https://www.youtube.com/watch?v=SDm477kS_g0



Duration: 23:57
123 views
4


All projects have bugs. Some of them have a security impact and can be used to cause harm. We call them vulnerabilities. Because of the possible impact of security issues, we handle them differently. This talk will guide the audience through the Eclipse Foundation processes of reporting and managing vulnerabilities with new tooling. As a bonus, Marta will show resources for your project, like a SECURITY.md template.




Other Videos By Eclipse Foundation


2023-05-29A Framework for Simulating Cyclists in SUMO
2023-05-29The Effects of Route Randomization on Urban Emissions
2023-05-29Evaluating the benefits of promoting intermodality and active modes in urban transport …
2023-05-29Analysis and Modelling of Road Traffic Using SUMO to Optimize the Arrival Time of Emergency Vehicles
2023-05-29SUMO Simulations for Federated Learning in Communicating Autonomous Vehicles
2023-05-29Sensor-based Flow Optimization on connected real-world intersections via a SUMO Feature Gap Analysis
2023-05-29Challenges in Reward Design for Reinforcement Learning-based Traffic Signal Control
2023-05-19Virtual IoT & Edge Days - Day 2
2023-05-19Virtual IoT & Edge Days - Day 1
2023-05-02Eclipse IDE Working Group Community Call Recording - April 26 2023
2023-04-24vECM - Someone reports a security issue in my project! Now what?
2023-04-13SDV Community Day - Lisbon 2023
2023-03-30Webinar: Come SLSA with us! With Chainguard, OpenSSF, Eclipse Foundation, and Rust Foundation
2023-03-23Power Skills Bootcamp
2023-03-15EMBEDDED WORLD 2023 | DAY 2 RECAP
2023-03-14EMBEDDED WORLD 2023 | RECAP DAY #1
2023-03-06The strategic significance of open source in Europe
2023-03-02Special Member Webinar - European Cyber Resilience Act
2023-02-10FOSDEM 2023: A complete compliance toolchain for Yocto projects (even very large ones, yes)
2023-02-10Open Source Good Governance – GGI Framework presentation & deployment
2023-02-10Is “European open source” a thing? The role of open source in building Europe’s digital sovereignty