OpenSearchCon India 2026

Within the open source community, supply chain security of software is a critical topic. What does this mean for open source software that you consume?

In this talk I intend to walk users through some security basics for open source software, using OpenSearch as an example. Some of the information will include scanning the repository, container images, dependency management, and deploying attestations, among others.

This topic is important specifically for end-user companies that are large, risk-averse, and depend on open source heavily. OSS projects, and the communities that surround them, are now compelled to adopt security best practices in order to position these projects as viable ones for commercial adoption.

OpenSearch is a perfect example of a popular open source project, backed by heavyweights, and in use by a large number of companies. Therefore, securing this project is of paramount importance for the community.