OpenSSF explains how its Gemara project clarifies security attestations and software supply-chain evaluations, helping organizations assess open-source components and meet due-diligence requirements under the EU Cyber Resilience Act.
Who Checked It? Attestations, Gemara, and CRA Due Diligence
OpenSSF explains how its Gemara project clarifies security attestations and software supply-chain evaluations, helping organizations assess open-source components and meet due-diligence requirements under the EU Cyber Resilience Act.
Source: OpenSSF