Open Source Summit + Embedded Linux Conference North America 2026

In this lightning talk, we’ll introduce the new open-source security tools guide from the Continuous Delivery Foundation and show how it delivers practical, workflow-driven guidance for integrating OpenSSF security tooling into real CI/CD pipelines—helping DevOps and platform engineering teams map pipeline activities directly to the Secure Software Development Framework (SSDF) tasks.

Attendees will learn how the guide helps organizations:
• Understand tooling to meet SSDF standards
• Integrate security without slowing delivery
• Move from tool sprawl to repeatable, secure delivery patterns

This session offers a fast, practical overview of how the CDF community is helping teams turn cybersecurity from an abstract requirement into an executable CI/CD strategy.