Open Source Summit North America 2025

The Department of Homeland Security builds and maintains thousands software systems. It would be difficult to find a system that doesn't use open source software. In fact, the U.S. government is likely the single largest consumer of OSS in the world and considering the criticality of the mission, the security of those systems is paramount. But until recently, there was no clear guidance on how we should select, consume, contribute to, and publish open source software. Recently the office of the DHS CIO published such guidance, providing much needed structure. This session will cover how DHS intends to secure its own systems by employing tools and processes to vet open source projects, ingest that software securely, and support those projects with substantive contributions.

Attendees from government entities, contractors, and members of the community should attend to learn how one agency is tackling the supply chain risks inherent in open source while still capturing the benefits that it has to offer. They'll come away with an understanding of how this might impact their work, and how by working together we can build a better open source ecosystem for everyone.