Open Source Summit North America 2022

OpenSSF's Allstar is a tool for administrators of GitHub organizations to help improve the security posture of their repositories. While GitHub provides some security settings at the organization level, such as 2-factor authentication requirement, other settings are only at the repository level, such as branch protection settings. Fortunately Allstar is able to scale setting enforcement across many repositories in a large organization. This talk will cover the security best practices that are baked-in to Allstar, and the configuration of those practices to allow defining a custom security policy that can fit the needs of various organizations. Policy enforcement actions will be covered, including notification, and direct setting remediation. Finally, it will cover what is next for Allstar, and ideas for future security policies.

Building a community is fundamentally about recognizing a group of people with underserved needs and the common thread of interest and passion that engages them. Red Hat is home to more than 50 Communities of Practice (CoPs): internal communities where associates from many differing roles and departments collaborate on technical, task-related, or vertical-centric topics. One is the Gaming CoP, focused on the video game industry (which is not historically a deep user of or contributor to open source), but more broadly, the interactive entertainment and simulation industries from animation and film to robotics and AI. We’ve built an open source arcade, hosted livestreams and podcasts, created demos, and engaged hundreds of colleagues with open source through a shared love for gaming. Join Gaming CoP leader Ruth Suehle to learn about building influence in an industry that has low open source familiarity or trust, the current state of open source in game development, and how to build an open community of practice in your company. If you heard this talk at OSS 2021, return to hear about a new year of growth, adjusting to change, and the lessons learned.