OpenSSF Community Day Europe 2026

Open source software powers much of Africa's digital infrastructure. Across the continent, communities are building new projects, maintaining existing ones, and adopting global technologies to accelerate innovation.
As adoption grows, so does the responsibility to secure the software supply chains these projects depend on. African organisations face limited cybersecurity resources, inconsistent funding, and uneven access to audits and tooling.
But security depends as much on the people maintaining a project as on the tools they use. OpenSSF Scorecard, OSPS Baseline, and audits only matter if contributors are available to act on the results. Someone has to review findings, fix vulnerabilities, and keep the project healthy.
This panel explores why community health is a security issue, and why contributor retention, trust, and sustainable maintainership are essential to software security.
Drawing on the OpenSSF Africa SIG, CHAOSS community-health metrics, and OSTIF's work supporting under-resourced projects, panelists will discuss practical ways to build resilient communities, use security guidance with limited resources, and strengthen Africa's open source ecosystem.