CISA outlines work to create framework for assessing trust in open source software

The Cybersecurity and Infrastructure Security Agency is working on a framework to establish a consistent method for assessing the trustworthiness of open source software components, according to a recent blog post.

“Achieving this goal will enable CISA and our partners across the federal government and critical infrastructure to manage cybersecurity risks more effectively and efficiently in the OSS that their missions substantially depend upon,” CISA open source software security chief Aeva Black says in a Monday blog post.

CISA...