VMware’s supply chain software team has been actively contributing to the world of open-source projects with a strong focus on ensuring the integrity of software updates within the supply chain ecosystem. By making impactful contributions to this field, the team works on enhancing the security and reliability of today’s software systems.    In previous blog … The post Security audit of go-tuf The Update Framework appeared first on Open Source Blog ..read more

Open Source project maintainers and contributors are a special breed – that’s something we know from personal experience. You’ve got to have a high tolerance for change, ambiguity, and to a certain extent, anonymity. Despite all the hard work and off-hours dedication expected of a maintainer, their work often goes unnoticed. The Linux Foundation is … The post Reflections on the Open Source Maintainers Report 2023 appeared first on Open Source Blog ..read more

Before Large Language Models (LLMs) came into vogue, normal-sized (<1B parameters) Language Models (LMs) were released as open-source with permissive licensing terms. BERT, and the Transformer architecture in general, ushered in a revolution in the Natural Language Processing (NLP) space leading to significant innovation and democratized the power of ML to the masses. All of … The post Open Source is the Future of LLMs appeared first on Open Source Blog ..read more

Introducing RSTUF (Repository Service for TUF) Beta Release! We’re thrilled to announce the availability of RSTUF, an innovative open source project designed to simplify and enhance secure content distribution. Securing software repositories is crucial to protect against supply chain attacks and tampering. The Update Framework (TUF) addresses this challenge by providing a robust framework for … The post Introducing RSTUF (Repository Service for TUF) Beta Release appeared first on Open Source Blog ..read more

The 2023 MLOps/Kubeflow Beijing User Meetup, organized by VMware on May 18th, brought together community and industry experts to explore cloud-native technologies in the machine learning operations (MLOps) field, with a particular focus on open source project Kubeflow. This event provided a platform for technical sharing and in-depth discussions with seasoned MLOps experts from the … The post Recap of the MLOps/Kubeflow User Meetup Beijing Session appeared first on Open Source Blog ..read more

The security of every application is vital to protect data, ensure regulatory compliance, maintain business continuity, safeguard reputation and trust, and mitigate risks. Security is an ongoing task and a key component for enterprise adoption. Building trust takes time and effort but could be ruined in days. It is important to continually assess and enhance … The post Hardening Kubeflow Security for Enterprise Environments (1.7 Release) appeared first on Open Source Blog ..read more

Overcoming the challenging issue of supply chain security demands the collective efforts of both industry and the open source communities. A multi-pronged ecosystem approach is crucial to advancing the state of art. Introducing Repository Service for TUF Repository Service for TUF is part of VMware’s broader investment to help improve security across the industry’s software … The post Safety for All with Repository Service for TUF appeared first on Open Source Blog ..read more

Signs that the Open Source Project is Reaching End-of-life In Part 1 of this blog series, “When and How to Deprecate an Open Source Project,” I provided useful tips and a step-by-step guide for responsibly deprecating an open source project. In this second installment, I’ll delve into the planning stages of a project’s lifecycle and … The post Deprecating an Open Source Project, Part 2 appeared first on Open Source Blog ..read more

Since the release of OpenAI’s ChatGPT in November 2022, large language models (LLMs) have gone mainstream and are slowly making their way into open source. Unlike similar chatbots that came before it, ChatGPT quickly spread widely, gaining more than 100 million monthly active users in just two months. With a simple user interface powered by … The post Exploring Generative AI in Open Source appeared first on Open Source Blog ..read more

In this blog post, I’ll share my findings regarding scanner detection accuracy of open source inventory for containers and the open source license detection accuracy. Also, I’ll explore the scanner tooling landscape. When looking at the container image scanners three years ago, I never could have imagined where all of this would lead. “A 20-minute … The post Comparing Container Scanners for Detection Accuracy appeared first on Open Source Blog ..read more