OpenAI?AAnthropic?ANVIDIA???Q???@Linux foundation???????????uAkrites?v?Ƃ??FOSS?C???ƊJ?????S???uAkrites?v

?@OSS?́A??ƃV?X?e????N???E?h?T?[?r?X?A?Ɩ??A?v???P?[?V?????A?Z?L?????e?B???i?AAI??Ղ̓????ōL???g???Ă???B???V?X?e???i??V?X?j???傪????OSS???Ǘ????Ă??Ȃ??Ă??A???Ђ????p????SaaS?A?J???‹??A?^?p?c?[???A?Г??V?X?e???̒??ɂ́A??????OSS?R???|?[?l???g???g?ݍ??܂?Ă???B

?@?]???AOSS?̐Ǝ㐫?Ή??́A?????҂?x???_?[?A???p??ƁAOSS?????e?i?[???•ʂɘA??????荇???Ȃ???i?߂邱?Ƃ??????????B?????AAI?ɂ???ĐƎ㐫?????̑??x???オ??ƁA???́u?•ʑΉ??v?͌??E???}????B?????̊?Ƃ??????Ǝ㐫??ʁX?ɒ??????A?قȂ?C???Ă??o???A?????e?i?[?ɏd???????񍐂𑗂?B?????????‚??͂??̑Ή??́A????̍??????????A???ʂƂ??ďC???̒x??ɂ‚Ȃ???B

?@???́A?Ǝ㐫???u???‚????邩?v?ł͂Ȃ??A?u???‚???????ɁA?N?????؂??A?N???C?????A?ǂ̏??ԂŌ??J???A?ǂꂾ???????{?Ԋ‹??ɓK?p?ł??邩?v?Ɉڂ??Ă???BAI?????OSS?Z?L?????e?B?ł́A?????\?͂????A?C???ƓK?p?̑̐????????B

Akrites?͉???????̂?

?@Akrites?̒??j?́AOSS?Ǝ㐫?Ή??̑??????ꌳ?????邱?Ƃ??B????܂ł̂悤?ɁA?e?Ђ??΂?΂?ɐƎ㐫??񍐂??A?????e?i?[?ɏd?????????ׂ???????̂ł͂Ȃ??A??????Security Incident Response Team?iSIRT?j??݂??A?Ǝ㐫?̏C???ƊJ???𒲐?????B

?@Akrites?́A?W???????ꂽ?u?????I?ȐƎ㐫?̊J???v?iCVD?FCoordinated Vulnerability Disclosure?j?̎菇????{?????A?W???????ꂽ?v???Z?X?Ƃ??ĉ^?p????B?Ǝ㐫???????Ɍ??J????̂ł͂Ȃ??A?܂??閧????Ń????e?i?[??֌W?҂ƘA?g???A?C???R?[?h???쐬?A???؂???B???̏?ŁA???S???m?ۂ??ꂽ?i?K?ŐӔC????`?ŊJ??????B???p????d?g?݂ɂ́ACVE?i???ʐƎ㐫???ʎq?j?ACWE?i???ʐƎ㐫?^?C?v?ꗗ?j?ACVSS?i???ʐƎ㐫?]???V?X?e???j?AEPSS?i?Ǝ㐫???p?\???X?R?A?????O?V?X?e???j?ASSVC?i?X?e?[?N?z???_?[?ŗL?̐Ǝ㐫???ށj?AVEX?i?Ǝ㐫?̉e???L???????L????d?g?݁j?Ȃǂ̋ƊE?W?????܂܂??B

?@?d?v?Ȃ̂́A?C????OSS?v???W?F?N?g?̖{???̏ꏊ?ɖ߂??_???BAI?ɂ?鋺?Ђ????܂???????Ƃ????āAOSS????Ƃ??Ƃ̓Ǝ??p?b?`??‚??????i?̒??ɕ??f????̂ł͂Ȃ??BAkrites?́A?㗬?v???W?F?N?g?ŏC?????A???̐??ʂ?OSS?R?~???j?e?B?S?̂ɊҌ????邱?Ƃ??d??????B

?u?Ō?̃????e?i?[?v?Ƃ??Ă̖???

?@OSS?̐Ǝ㐫?Ή??œ???̂́A?S?Ă̏d?v?p?b?P?[?W?ɏ\???ȃ????e?i?[??????킯?ł͂Ȃ????Ƃ??B?Љ?I?ɏd?v?ȃ\?t?g?E?F?A?ł????Ă??A???ۂɂ͏??l???̃{?????e?B?A?Ɉˑ????Ă?????A?????ԃ????e?i???X????Ă??Ȃ??????肷??P?[?X??????B

?@Akrites?́A?????????d?v?p?b?P?[?W?ɃA?N?e?B?u?ȃ????e?i?[?????Ȃ??ꍇ?A?u?Ō?̃????e?i?[?v?Ƃ??ċ@?\????B?‚܂?A???u???ꂽ?d?vOSS?ɂ‚??āA?C?????ŐV?o?[?W?????ɔ??f???A???p?҂֓͂????????S???B????́AOSS?̈??S????P?ӂ̌l?????Ɉˑ??????Ȃ????߂̎d?g?݂ł?????B

?@???̍l?????́A??Ƃ̏?V?X????ɂ???????^????B???Ђ????p????OSS??\?t?g?E?F?A???i?ɂ‚??āA?u?N?????????Ă????͂??v?ƍl???邾???ł͕s?\?????B?ǂ?OSS?Ɉˑ????Ă???̂??A?????e?i???X?󋵂͂ǂ????A?C?????o???ꍇ?ɂǂ̃V?X?e???։e??????̂???c??????K?v??????B

?S?[???́u?p?b?`???J?v?ł͂Ȃ??u?p?b?`?K?p?v

?@Akrites???????I?Ȃ̂́A?Ǝ㐫?C???????J???ďI???ɂ??Ȃ??_???BJPMorganChase??CISO?p?g???b?N?E?I?y?b?g???́A?????w?W???u?p?b?`?̌??J?v?ł͂Ȃ??u?p?b?`?̓K?p?v?ɒu???l?????????Ă???B?Ǝ㐫????C???R?[?h?????J????Ă??A?a?@?A??s?A?d?͖ԁA?ʐM?ԂȂǂ̎??ۂ̃V?X?e???ɓK?p????Ȃ???΁A???X?N?͎c?葱????B

?@????͊?Ƃ̐Ǝ㐫?Ǘ??ł????????B?Z?L?????e?B???傪?Ǝ㐫???????m???Ă??A?J???????^?p???傪?e???͈͂????ł????A???؂⃊???[?X?̎菇???????Ă??Ȃ???΁A?C???͖{?Ԋ‹??ɓ͂??Ȃ??BAI????ɂ́A?Ǝ㐫?̔??????爫?p?܂ł̎??Ԃ??Z???Ȃ邽?߁A?u???‚??K?p????v?ł͂Ȃ??A?u?ǂ̐Ǝ㐫???A?ǂ̏??ԂŁA?????ȓ??ɓK?p???邩?v?????߂?K?v??????B

?@???̂??߂ɂ́ASBOM?i?\?t?g?E?F?A???i?\?j?̐????A?ˑ??֌W?̉Ž????A?Ǝ㐫?Ǘ??c?[???̊??p?A?p?b?`?K?p?̗D?揇?ʕt???A??O?Ǘ??A?o?c?w?ւ̃??X?N?????????????Ȃ??BAkrites?̓o??́A??Ƒ??ɂ??u?C?????󂯎???̐??v?Ɓu?v???ɓW?J?ł???̐??v?????߂Ă???B

??????Ƃ????g?ވٗ?̘g?g??

?@Akrites?ɂ́A?{???͋????֌W?ɂ?????IT??ƁAAI??ƁA???Z?@?ցA?ʐM???ƎҁA?Z?L?????e?B?x???_?[???Q?????Ă???B?N???E?h?⃁?K?e?b?N?ł?AWS?AGoogle?AMicrosoft??GitHub?AIBM?ARed Hat?ACisco??????A?˂?BAI?̈?ł?OpenAI?AAnthropic?ANVIDIA?B???Z?A?ʐM?A?Z?L?????e?B?̈?ł?Citigroup?AJPMorgan Chase?AVodafone?AEricsson?AZscaler?AChainguard?AEndor Labs?ARapidFort?ASonatype?Ȃǂ??????BThe Linux Foundation?̊???ł???Alpha-Omega?i???j?́AAkrites?ɃV?[?h??????񋟂???B

?????F?I?[?v???\?[?X?̃Z?L?????e?B?????ڎw???ƊE???f?g?DOpenSSF?iOpen Source Security Foundation?j??The Linux Foundation?̎P???Ŕ????????v???W?F?N?g?BMicrosoft??Google?̎x?????󂯂Ĕ????B

?@???̊?Ԃꂪ?????̂́AOSS?Z?L?????e?B???????Ƃ????̖??ł͂Ȃ??Ȃ??Ă???Ƃ??????Ƃ??BOSS?̐Ǝ㐫?́A1?‚̃x???_?[???i??1?‚̋ƊE?ɕ‚??Ȃ??B???Z?@?ցA?ʐM???ƎҁA?N???E?h???ƎҁAAI??Ƃ?????OSS?Ɉˑ????Ă???ȏ?A1?‚̐Ǝ㐫???????̎Љ?C???t???ɔg?y????”\????????B

?@?????炱???A?e?Ђ??•ʂɐƎ㐫???͂????ނ̂ł͂Ȃ??A?㗬?ŏC?????A?ƊE?S?̂ŋ??L????̐????K?v?ɂȂ?BAkrites?́AOSS???u?N?????????Œ񋟂??Ă????֗??ȕ??i?v?ł͂Ȃ??A?Љ?S?̂Ŏ??ׂ????L???Y?Ƃ??Ĉʒu?t?????????g?݂??B

?Q???e?Ђ????L?????@??

?@?Q????Ƃ̃R?????g?ɂ́A???ʂ??????b?Z?[?W??????B??1?ɁA?u???‚???̂͋@?B?A?????̂͐l?ԁv?Ƃ??????ӎ????B?\?t?g?E?F?A?x???_?[Endor Labs?́AAI?ɂ???ĐƎ㐫?????͗e?ՂɂȂ???????A???؍ς݂?OSS?Ǝ㐫?̂????A???ۂɏC??????Ă?????̂?5?????????Ǝw?E???Ă???B?????̎????????i??ł??A?C???A???؁A?㗬?ւ̔??f?A???p??Ƃւ̓W?J?͎????I?ɂ͐i?܂Ȃ??B

?@??2?ɁAOSS????I?ɂ??Ă͂Ȃ?Ȃ??Ƃ????l???????B?\?t?g?E?F?A?x???_?[RapidFort?́AAI?ɂ??Ǝ㐫??@?ւ̑Ή??Ƃ??āAOSS??Ǝ????i?̕ǂ̒??ɕ‚????߂???A?t?H?[?N?ɂ???ĕ??f?????肷??ׂ??ł͂Ȃ??Ƒi???Ă???B?C???̓I?[?v???Ȃ܂܏㗬?ɖ߂??A???L???Y?Ƃ??Ă?OSS?????ׂ????Ƃ??????ꂾ?B

?@??3?ɁA?????e?i?[?̕??S?????炷???Ƃ??BJPMorgan Chase??Rust Foundation?́AOSS?????e?i?[?ɏd????????ʂ̕񍐂𑗂?‚???̂ł͂Ȃ??A???؍ς݂̐Ǝ㐫?ƁA?e?X?g?ς݂̏C???Ă??A?M???ł??鑋??????͂??邱?Ƃ̏d?v???????????Ă???B?P?ӂ̃????e?i?[?Ɉˑ?????????̂ł͂Ȃ??A?ƊE?S?̂Ŏx??????d?g?݂??K?v???B

??V?X?͉??????????ׂ???

?@Akrites?̔????́A??V?X????ɂƂ??Ă????֌W?ł͂Ȃ??B????AOSS?Ǝ㐫???͂???܂ňȏ?ɍ????ɗ??ʂ??A?C???????Z???T?C?N???ŋ??߂???”\????????B???̂Ƃ??A???Ђ̃V?X?e?????ǂ?OSS?Ɉˑ????Ă??邩??????Ȃ???΁A?e???͈͂𔻒f?ł??Ȃ??B?p?b?`?K?p?̐ӔC???E?_???B???ł???΁A?Ή??͒x???B

?@?܂??K?v?Ȃ̂́A?\?t?g?E?F?A???Y?ƈˑ??֌W?̉Ž??????B???ЊJ???V?X?e???????łȂ??A?O???ϑ??悪?J???????V?X?e???A???p????SaaS?A?p?b?P?[?W???i?A?R???e?i?C???[?W?A?J???c?[???Ɋ܂܂??OSS??c??????K?v??????BSBOM?𐮔????A?Ǝ㐫???ƂЂ??t???????Ԃɂ??邱?Ƃ??????ɂȂ?B

?@???ɁA?p?b?`?K?p?̗D?揇?ʂ????߂?d?g?݂??K?v???BCVSS?̃X?R?A?????łȂ??A???ۂɈ??p?????”\???A?C???^?[?l?b?g???J?̗L???A?Ɩ??e???A??֍?̗L???𓥂܂??Ĕ??f????BEPSS??SSVC?̂悤?Ȏw?W?́A?????????D?揇?ʕt???̎Q?l?ɂȂ?B

?@????ɁA?J???A?^?p?A?Z?L?????e?B?A???B?A?@???A?o?c?w?̘A?g?????????Ȃ??BOSS?Ǝ㐫?Ή??́A?Z?L?????e?B???傾???Ŋ??????Ȃ??B?p?b?`?K?p?ɂ̓V?X?e????~?A???؁A?x???_?[?????A?Ɩ?????Ƃ̒??????????BAI????̐Ǝ㐫?Ή??ł́A?Z?p?I?Ȍ??m?????A?g?D?Ƃ??đ????ӎv???肵?A???s????͂??????B

OSS???u?g???????v?̎???͏I???

?@Akrites?́AAI?????OSS?Z?L?????e?B?Ɍ???????S?I?ȋ????h?q?̘g?g?݂??B?Ǝ㐫?????‚??鑬?x??AI?ɂ???č??܂钆?A?ƊE?S?̂ŏC???𒲐????A?㗬?ɖ߂??A?d?v?C???t???Ɋm???ɓK?p???邱?Ƃ?ڎw???Ă???B

?@??ƂɂƂ??ďd?v?Ȃ̂́AAkrites?̔?????P?Ȃ?C?O?̋ƊE?j???[?X?Ƃ??đ????Ȃ????Ƃ??B???Ђ??ˑ?????OSS??c?????A?Ǝ㐫?????‚??????Ƃ??ɂǂ̃V?X?e???։e??????̂??𔻒f???A?C????v???ɓK?p?ł???̐??𐮂???K?v??????B

?@OSS?́A???͂?J???҂????̂??̂ł͂Ȃ??B??s?A?a?@?A?d?͖ԁA?ʐM?ԁAAI?T?[?r?X?A?s???V?X?e?????x????Љ?C???t???̈ꕔ???BAI???Ǝ㐫?𐔕??Ō??‚??鎞??ɂ́AOSS???u?????Ŏg???镔?i?v?Ƃ??Ĉ????̂ł͂Ȃ??A?u?????Ŏ??ׂ???Ձv?Ƃ??đ????邱?Ƃ??A??V?X????ɂ????߂???B