Electron 45 is now available! 🚢

In this release:

💨 Faster startup, menus, and native API calls
🔑 System passkeys on macOS
🔮 Experimental Prompt API support with local AI handlers

Read more: https://www.electronjs.org/blog/electron-45-0

🚨 New Tech Talk Alert

📅 Nov 2, 12 PM ET: Join OpenSSF to learn how an upstream-first strategy reduces tech debt & streamlines CRA compliance!

Featuring experts from Linux Foundation, Ericsson, & ActiveState.

Read: https://openssf.org/blog/2026/10/23/new-openssf-tech-talk-how-upstream-contribution-minimizes-technical-debt-streamlines-cra-reporting/

Register: https://zoom.us/webinar/register/WN_aAIgTxlQRv-qPvuompplNg#/registration

Some industrial systems run for 20 to 40 years and need security patches the whole time. CIP maintains its kernels for 10 years, with members sharing the engineering work.

Read the full report: https://www.linuxfoundation.org/research/civil-infrastructure-platform-at-10

💎 How do software attestations support due diligence?

Eddie Knight explores how OpenSSF’s Gemara connects security policies, evaluations, enforcement, and audit evidence, with a practical look at CRA readiness.

Read more: https://openssf.org/blog/2026/10/22/who-checked-it-attestations-gemara-and-cra-due-diligence/

LF Research: GenAI cuts open source coding time in half, but 25% of incoming pull requests are estimated to be low-quality AI slop. With maintainer workloads rising, open source projects need stronger AI governance, transparent attribution and clear contribution guidelines.

Learn more about the state of OSS in the GenAI era here: https://www.linuxfoundation.org/research/oss-development-gen-ai-era-2026

Your Wednesday night #KubeCon plans? Sorted.

Join OpenSSF + Defense Unicorns at ZarfFest for drinks, bites, and open source community.

Nov. 11 | 6:30–9:30 p.m.
Le Méridien, Salt Lake City

Register: https://defenseunicorns.com/events/zarffest/

OpenSSF just launched a new guide: Finding and Fixing Software Vulnerabilities Using AI, authored by David A. Wheeler. Learn how to prepare your setup, run AI effectively, and build deterministic safety nets for your code.

Read & access the guide: https://openssf.org/blog/2026/10/20/new-openssf-guide-finding-and-fixing-vulnerabilities-using-ai/

What happens when an AI agent can hide its tracks?

CNCF’s Chris Aniszczyk joins CRob on What’s in the SOSS? to explore autonomous agents, disappearing evidence, and why independent observability matters.

🎧 Listen: https://openssf.org/podcast/2026/10/20/whats-in-the-soss-podcast-76-s3e28-invisible-infrastructure-autonomous-agents-and-10-years-of-cloud-native-with-cncfs-chris-aniszczyk/

Generative AI is reshaping open source development, and the trade-offs are starting to show.

LF Research surveyed 234 OSS contributors and maintainers: 1 in 4 incoming PRs are now "AI slop," and only 1 in 3 projects have a formal AI policy.

Read the full report to learn more: https://www.linuxfoundation.org/research/oss-development-gen-ai-era-2026?hsLang=en

From 1 ecosystem to 8. 🔐

GitHub expanded malware advisories using OpenSSF’s community-driven data, bringing broader coverage to developers with Dependabot malware alerts enabled.

See shared security infrastructure in action: https://openssf.org/blog/2026/10/16/case-study-github-expands-malware-advisories-across-eight-ecosystems-with-openssf/

🎉 35 years of Linux!

From a hobby project to powering 4B Android devices, 200M+ servers & all 500 of the world’s top supercomputers. 🐧

In her latest blog, Hilary Carter, SVP of LF Research shares insights 35 years of Linux and the open source ecosystem

https://www.linuxfoundation.org/blog/celebrating-35-years-of-linux-the-open-source-engine-powering-three-decades-of-global-innovation-and-infrastructure

Welcome Privateer to the OpenSSF Sandbox! 🎉

Privateer combines automated security checks with optional AI-assisted evidence review, flagging uncertain findings for human review.

Explore the project and get involved: https://openssf.org/blog/2026/10/13/introducing-privateer-ai-assisted-security-compliance-evaluation-framework-joins-the-openssf-sandbox/

Hilary Carter shares some key findings from the 2026 State of OSPOs report: 57% have stayed in the same org home for 2-3 years, APAC is leading the next wave of growth, and OSPOs are focused on licensing, security, and data privacy risk in AI.

Read more: https://www.linuxfoundation.org/blog/navigating-open-source-governance-in-the-age-of-artificial-intelligence-the-2026-state-of-ospos-and-open-source-management

AI agent capability is no longer the gate. Organizational readiness is. Irving Wladawsky-Berger writes about LF Research's new report on enterprises transitioning to the agentic era, and why governance must shift from retrospective audits to real-time control.

Read more: https://www.linuxfoundation.org/blog/how-should-enterprises-transition-to-the-agentic-era

Energy grids, water systems & transportation run for decades. The software behind them needs to keep up.

Hilary Carter shares 4 priorities from a new report marking 10 years of CIP: governance, security by design, shared regulatory frameworks, and hardware alignment.

https://www.linuxfoundation.org/blog/a-decade-of-industrial-grade-linux-how-the-civil-infrastructure-platform-is-securing-mission-critical-systems

📣 Join the new #PlatformEngineering Special Interest Group, chaired by Jennifer Mulford. First meeting is on Monday, October 12. Learn more and apply here: https://hubs.la/Q04zC1MR0

Our new report, “Strengthening Software Supply Chain Security with OpenChain and OpenSSF,” explores how OpenChain's governance processes and OpenSSF's secure engineering practices work together.

https://openssf.org/resources/strengthening-software-supply-chain-security-with-openchain-and-openssf/

How did a hobby project become the engine of global infrastructure?

A new LF Research report marks 35 years since Linux began in Helsinki. Today it runs 4B Android devices, 200M+ servers, and all top 500 supercomputers, with 80%+ of contributions now coming from corporate engineers.

Read more: https://www.linuxfoundation.org/research/35-years-of-linux?hsLang=en

📣 CDF project releases, features, security updates and more
#CDEvents #JayeX #Jenkins #Ortelius #Screwdriver #Spinnaker
View all: https://cd.foundation/blog/2026/09/30/project-updates-sept-2026/

🚀 The Fall Security Slam is live! Join the open source community October 5–November 6 to strengthen your project’s security, earn badges, and put OpenSSF best practices into action. All projects are welcome!

🎥 Learn how to get started with Eddie:

https://youtu.be/AvjltBoM4rE?si=n_kqoCkAY2YjtoUA