# Open source software takes center stage at RSA

DevFeed: [Open source software takes center stage at RSA](<https://devfeed.tech/articles/open-source-software-takes-center-stage-at-rsa-13196.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/open-source-software-takes-center-stage-at-rsa>)

Published: 2023-04-24T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [npm](<https://devfeed.tech/topics/npm.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [Python](<https://devfeed.tech/topics/python.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [npm](<https://devfeed.tech/tags/npm.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [open-source-software](<https://devfeed.tech/tags/open-source-software.md>), [open-source-software-security](<https://devfeed.tech/tags/open-source-software-security.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

## AI overview

The article examines why open-source software security became a major topic at the 2023 RSA Conference. It discusses software supply-chain risks, including the Log4j exploit, and highlights package provenance in npm, Sigstore-based signing and verification, and trusted publishers using OpenID Connect in PyPI.

## Source excerpt

Open source software security takes center stage in the 2023 RSA Trends Report. Learn why it's a top concern.