Linux Security Summit North America 2017

OSS is critical in the world today. However, OSS projects do not always follow best practices, leading to dangerous security vulnerabilities. To address this, in 2016 the Core Infrastructure Initiative (CII) established a "best practices badge" program, which created "best practices" criteria and a process so OSS projects could get a badge for meeting these criteria. This incentivizes projects to apply best practices and helps users identify projects using best practices.

This presentation will discuss the current status of the badging program. It will highlight recent changes, including the new criteria for the new “higher-level” silver and gold badges. It will also discuss the projects with badges, security improvements projects have made to get the badge, some interesting ways that projects have met the criteria, and the criteria most missed today.