Wednesday, June 29, 2022 - 00:00

Eclipse Foundation Partners With OpenSSF’s Alpha-Omega Project

  • Share this article:

With the help of funding from the Alpha-Omega Project, the Eclipse Foundation is rolling out new supply chain security measures. 

Some of these measures will include: 

  • Automating the generation of static source-based SBOMs for all Eclipse Foundation project repositories.
  • Implementing a SLSA-based project badging program for Eclipse Foundation projects.
  • Initiating a number of security audits for high-profile Eclipse Foundation projects.

Our Open Source Supply Chain Best Practices are available to read on GitHub.


For more background on our plans to bolster open source security, read this recent blog post from Eclipse Foundation Executive Director Mike Milinkovich.

More from this Edition

How Eclipse POOSL Enables Early System Validation

Learn why POOSL is well-suited for use in risk-averse settings to mitigate risks for many different types of applications, like mission-critical applications.

Eclipse Arrowhead: On the Bleeding Edge of Industry 4.0

The Arrowhead Tools European research project is coming to an end. However, the Eclipse Arrowhead project, which was created in 2020, will continue to build on the results of the research project.

TRANSACT: Bringing the Cloud to Safety-Critical Cyber-Physical Systems

The TRANSACT team is developing a safety-critical CPS that will pave the way for faster, cheaper, and more flexible solutions tailored to customer needs.