Loading post…
JetbrainsKatherine DruckmanAnnouncement
JetBrains Joins the Open Source Security Foundation
Summary
JetBrains has joined the Open Source Security Foundation (OpenSSF) as a general member. OpenSSF is a cross-industry Linux Foundation initiative that works to secure the software supply chain, hosting projects like Sigstore for signing and SLSA for supply chain integrity, and its AI/ML Security Working Group publishes guidance on signing ML models and safe instructions for AI code assistants. The foundation announced the membership at OpenSSF Community Day Europe in Prague. JetBrains cites the rise of coding agents and AI as creating new security challenges, making it more important for developers to understand and verify code and dependencies, and notes that its own product JetBrains Air addresses these questions. The company aims to collaborate with the industry through OpenSSF to help shape the future of secure software development, as stated by Katherine Druckman, Head of Community and Partnership Engagement.
Context
The software industry is at an inflection point where AI and coding agents are changing how software is built, creating new security challenges around trust and verification of code and dependencies, making it more important for developers to understand and verify the software they produce.
Approach / What changed
JetBrains joined OpenSSF as a general member to collaborate with the industry on securing the software supply chain and addressing AI-related security challenges, complementing its own product JetBrains Air that helps developers understand and verify what agents produce.
Takeaways
OpenSSF hosts projects like Sigstore for signing and verifying software and SLSA for supply chain integrity.
OpenSSF’s AI/ML Security Working Group publishes guidance on signing machine learning models and writing safe instructions for AI code assistants.
JetBrains has its own product, JetBrains Air, that helps developers understand and verify what agents produce.
FAQ
Why did JetBrains join OpenSSF?
JetBrains joined OpenSSF to collaborate with the industry on security challenges raised by AI and coding agents, as they believe staying ahead of these challenges is best done collaboratively and in the open.
What projects does OpenSSF host?
OpenSSF hosts projects like Sigstore for signing and verifying software and SLSA for supply chain integrity, and its AI/ML Security Working Group publishes guidance on signing ML models and safe instructions for AI code assistants.
What is JetBrains Air?
JetBrains Air is JetBrains' product that helps developers understand and verify what coding agents produce, addressing the new security questions AI raises about trust in models and assistants.
Source and freshness
- Source
- blog.jetbrains.com
- Published
- Added to Yomu
Summaries are generated from the original by a language model. Check the original before relying on it.
Keep reading
Related reading
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
The best engineering reads, once a week
One useful email. Unsubscribe anytime.