OpenSSF Expands Membership and Releases New CRA Resources
The Open Source Security Foundation (OpenSSF) announced the addition of four new members—A-Team Systems, Emphere, DACHS IT GMBH, and JetBrains—as it continues to grow its cross-industry collaboration on open source security. The foundation also released updated resources related to the EU Cyber Resilience Act (CRA), including a practitioner's guide, user journeys, and a case study highlighting Ericsson’s upstream fixes as part of CRA compliance efforts. With regulatory pressure increasing for companies selling products in the EU, OpenSSF is positioning itself as a central hub for guidance on mandatory vulnerability reporting under the CRA. The foundation emphasized that securing open source software now requires systemic collaboration rather than isolated solutions. New tools and frameworks were also introduced to help developers manage SBOMs at scale. These developments reflect growing momentum around open source security, particularly in response to evolving regulatory requirements and advancements like AI-driven vulnerability discovery.
Topics: Cyber Resilience Act (CRA) open_source_security OpenSSF membership growth