Institute for Security and Technology seeks centralized software vulnerabilities database in response to open source initiative RFI

The nonprofit Institute for Security and Technology is urging an interagency group led by the Office of the National Cyber Director to create a centralized database for software vulnerabilities and consider the incentive structure to enable more secure open source code at scale, in response to a request for information on software security.

The RFI issued in August sought to determine next steps for the interagency Open-Source Software Security Initiative (OS3I) that was established in 2021, following the fallout...