OpenSSF adds JetBrains and others to membership, releases CRA compliance resources
Key Takeaway
OpenSSF has expanded its membership and released new guidance to help organizations comply with the EU Cyber Resilience Act (CRA).
Summary
During Community Day Europe, the Open Source Security Foundation (OpenSSF) announced new General Members, including JetBrains, A-Team Systems, Emphere, and DACHS IT GMBH. The foundation also released several resources focused on the EU Cyber Resilience Act (CRA), including a practitioner's guide and user journeys. Additionally, the OpenSSF Sandbox welcomed BOMHort, a Kubernetes-native SBOM visualization tool.
OpenSSF Q3 Milestones
- CRA Compliance: Released a practitioner's guide and user journeys to assist with mandatory vulnerability and incident reporting requirements.
- Upstream Contributions: Highlighted an Ericsson case study involving over 1,400 upstream dependency updates and security fixes.
- OpenBao v2.6: Released a new version of the secrets management tool featuring per-namespace sealing and a new cross-plugin workflow engine.
- BOMHort: Added a Kubernetes-native tool for SBOM (Software Bill of Materials) visualization and governance to the Sandbox.
Why it matters
The focus on CRA compliance and SBOM management reflects the increasing regulatory pressure on software supply chain security in the EU and globally.
Original reference: openssf.org →