Google has announced the general availability of its Assured Open Source Software (Assured OSS) service for more than a thousand curated Java and Python packages.
Now available at no cost, the Assured OSS program offers developers and organizations “the opportunity to leverage the security and experience Google applies to open source dependencies by incorporating the same OSS packages that Google secures and uses into their own developer workflows,” says Andy Chang.
Through Assured OSS, Google will help secure packages by, for example:
- Operating a critical patching team to support covered packages
- Mirroring key external ecosystems to manage end-to-end security without creating forks
- Continuously scanning for, fuzz testing, and fixing critical vulnerabilities
Users can get started through the self-serve onboarding form and then integrate the service into their development pipeline.
See details at Google Open Source.
Looking for a job?
Check out the latest job listings at Open Source JobHub.
Comments