Loading feed…
OpenSSF0 Hot0 comments34 min read
What’s in the SOSS? Podcast #69 – S3E21 Watering the Community Garden: Navigating the EU CRA for Open Source with Roman Zhukov – Open Source Security Foundation
A podcast episode features Roman Zhukov, co-chair of the OpenSSF Global Cyber Policy Working Group and Security Communities Lead at Red Hat, explaining the EU Cyber Resilience Act (CRA) using a community garden analogy to define maintainers, stewards, and manufacturers. The conversation covers findings from the 2026 CRA Awareness and Readiness Report, including that 66% of organizations remain unaware of the regulation, over 70% of North American software producers are unfamiliar with it, and maintaining private forks costs organizations over $250,000 per release cycle in engineering overhead. Key CRA deadlines are discussed: vulnerability reporting obligations begin September 2026, with full compliance required by December 2027. The discussion also touches on AI-generated vulnerability report spam, the end of the 'consume and forget' open source model, and free OpenSSF resources like OSPS, SLSA, Gemara, GUAC, and a free CRA training course.
Source: https://openssf.org/podcast/2026/08/18/whats-in-the-soss-podcast-69-s3e21-watering-the-community-garden-navigating-the-eu-cra-for-open-source-with-roman-zhukov. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
