Open source software (OSS) is everywhere, but unfortunately that means it's under attack. The good news is that there are many efforts to improve the security of OSS, including its supply chain. David A. Wheeler will discuss some of the ways that the industry is working to improve security, focusing especially on efforts by the Linux Foundation's Open Source Security Foundation.