{"id":25862,"date":"2022-09-26T12:47:54","date_gmt":"2022-09-26T12:47:54","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/"},"modified":"2026-08-08T05:02:39","modified_gmt":"2026-08-08T05:02:39","slug":"how-government-can-rebuild-trust-in-open-source-software","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/","title":{"rendered":"How government can rebuild trust in open-source software"},"content":{"rendered":"\n

IT visionary Marc Andreessen once quipped that \u201csoftware is eating the world.\u201d A decade or so later, application-layer security concerns are eating at software developers, especially in the public sector.<\/p>\n\n\n\n

Much of the angst stems from open-source software, which benefits developers by allowing them to streamline management of common features and tasks \u2013 and focus more development time on critical features or business logic that are unique to the software they are building.<\/p>\n\n\n\n

Yet despite these advantages, its popularity makes open-source software a target for cybercriminals. It can frequently contain undiscovered security vulnerabilities that could threaten an app, a website, or an entire network. In the absence of rigorous security checks, developing software using open-source components can be a gateway to future security vulnerabilities. That\u2019s because open-source components can introduce security vulnerabilities \u2013 just as first-party code can.<\/p>\n\n\n\n

In government, the challenge is acute. Compared to other sectors, applications used by government agencies have the highest rate of known security flaws, according to the recently released State of Software Security (SOSS)<\/a> annual report. Analyzing data from 20 million scans and half a million applications, researchers found security flaws in 82 percent of public sector applications.<\/p>\n\n\n\n

The government\u2019s record of remediating known security flaws in software doesn\u2019t compare favorably with other sectors. Across sectors, about 30 percent of vulnerable libraries remain unresolved after two years. For the public sector, that statistic almost doubles to more than 55 percent and lags the cross-industry average by over 15 months. And a meager overall fix rate of 22 percent puts the public sector at heightened risk of successful cyberattacks against critical government applications. (The fix rate of other sectors is similarly poor.) At a time when the administration has signaled its commitment to improving the customer experience of citizens who access digital government services, software security flaws are ticking time bombs.<\/p>\n\n\n\n

Improve open-source security<\/h2>\n\n\n\n

Open-source software is ubiquitous and it\u2019s not going away \u2013 for good reason. Flexible and cost-effective, open-source software is the foundation of most applications across all industries.<\/p>\n\n\n\n

Yet the challenge of security vulnerabilities in the public sector is hard to ignore. Who hasn\u2019t received \u201cfree credit monitoring\u201d as compensation for a security breach that compromised personal information? Last year, a software vulnerability discovered in Apache\u2019s Log4j<\/a>, a popular open-source library and logging utility, created a way for hackers to take control of devices on the internet.<\/p>\n\n\n\n

Often, there is little correlation between the popularity of open-source software and resources available to their developers for security. Those projects often have little to no funding, making security a challenge for maintainers. The issue has begun to draw the attention of public officials who have identified the link between software security and public trust as an area of concern. In January, the Biden administration met with major IT companies to discuss improving security of open-source projects, including prevention of security defects, finding them when they occur, and accelerating the repair of faulty code.<\/p>\n\n\n\n

Build security into apps from the start<\/h2>\n\n\n\n

There is a solution. Agencies and their IT partners must take a \u201cshift left\u201d approach to security\u2014moving it to the beginning of the software development lifecycle (SDLC) instead of placing it at the end\u2014and continue to vigilantly monitor for security vulnerabilities throughout the entire lifetime of the software.<\/p>\n\n\n\n

The prerequisites of a robust software security program require application developers in the public sector to continually monitor applications throughout the SDLC, efficiently identify security flaws, and quickly remediate identified vulnerabilities.<\/p>\n\n\n\n

Typically, developers of open-source software are quick to issue patches for newly discovered vulnerabilities. The risk to organizations escalates when patching is delayed. Open-source software that\u2019s not adequately maintained doesn\u2019t age like wine; it ages like milk.<\/p>\n\n\n\n

New vulnerabilities requiring remediation are being discovered all the time, yet public sector agencies, as noted, are notoriously slow to patch known security flaws. Exacerbating the problem at many agencies is the large volume of patching that\u2019s required\u2013a massive buildup of technical debt\u2013and insufficient resources for fixing them.<\/p>\n\n\n\n

Gain visibility with automated analysis<\/h2>\n\n\n\n

What\u2019s needed is an automated solution that alerts users when to act. Software composition analysis (SCA) tools analyze applications\u2019 open-source elements, including the flagging of open-source code that\u2019s out-of-date or in need of patching. Gaining visibility is a big step in the direction of software security because you can\u2019t fix what you can\u2019t see.<\/p>\n\n\n\n

Without a software composition analysis tool, an agency could spend months determining which of its applications contains a newly discovered vulnerability.<\/p>\n\n\n\n

Second, agencies must have the capability to perform gap analysis and to determine which products are most out of date and vulnerable \u2013 and which vulnerabilities are most likely to impede agencies\u2019 missions.<\/p>\n\n\n\n

It\u2019s important to prioritize remediation because agencies don\u2019t have the capacity to easily wipe out accumulated technical debt \u2013 much the same way that you wouldn\u2019t expect somebody who had racked up $100,000 in credit card debt to sort it out in the first month.<\/p>\n\n\n\n

Practice Rigorous Security<\/h2>\n\n\n\n

To efficiently remediate vulnerabilities, developers must practice rigorous security hygiene as codified in the maxim \u201cfix early, fix often.\u201d And it\u2019s never too early. Developers taking more aggressive action in the form of a hard shift left are acknowledging the symbiotic relationship between security and development teams \u2013 a departure from the outmoded practice of bolting security onto software after it has been developed.<\/p>\n\n\n\n

Shifting left will prevent organizations from accumulating more security debt. Over time, security debt will decline.<\/p>\n\n\n\n

Ideally, a software security solution will behave as a comprehensive, unified platform, rather than a mix of disparate tools. The platform must be capable of performing multiple testing types at various stages of the SDLC, with the goal of ensuring compliance to policy and reducing the time needed to identify and remediate flaws \u2013 from years to days, or even hours.<\/p>\n\n\n\n

Compared to proprietary applications that are coded from the ground up, the process of developing applications built with open-source software is faster, more flexible, and less costly. None of those benefits matter, however, if a hacker can exploit an undetected vulnerability in embedded open-source code. With the security tools that are available today, there\u2019s no reason for that to happen. Hewing to rigorous security protocols \u2013 from the outset of an application build and continuing through deployment \u2013 allows developers to benefit from open-source resources without being consumed by security concerns. With the right tools, they can have their code and security too.<\/p>\n\n\n\n

Chris Eng is the chief research officer at Veracode, an application security company based in Burlington, Massachusetts.<\/i><\/p>\n\n\n\n

Have an Opinion?<\/h2>\n\n\n\n

This article is an Op-Ed and the opinions expressed are those of the author. If you would like to respond, or have an editorial of your own you would like to submit, please email Federal Times Senior Managing Editor Cary O\u2019Reilly.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Open-source software, which benefits developers by allowing them to streamline management of common features and tasks, can be defended from cyberattacks.<\/p>\n","protected":false},"author":7,"featured_media":47892,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":14,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[12,31,15,14,26,22],"tags":[],"coauthors":[5838],"class_list":["post-25862","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-govcon","category-home","category-management","category-it-networks","category-opinions","category-thought-leadership"],"acf":{"subheadline":"","legacy_arc_id":"5ZPYGLVGWBE4LJ3KTSDPLYEYSQ","arc_canonical_url":"\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\nHow government can rebuild trust in open-source software - Federal Times<\/title>\n<meta name=\"description\" content=\"Open-source software, which benefits developers by allowing them to streamline management of common features and tasks, can be defended from cyberattacks.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How government can rebuild trust in open-source software\" \/>\n<meta property=\"og:description\" content=\"Open-source software, which benefits developers by allowing them to streamline management of common features and tasks, can be defended from cyberattacks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/\" \/>\n<meta property=\"og:site_name\" content=\"Federal Times\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-26T12:47:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T05:02:39+00:00\" \/>\n<meta name=\"author\" content=\"Chris Eng\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chris Eng\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t \"@context\": \"https:\\\/\\\/schema.org\",\n\t \"@graph\": [\n\t {\n\t \"@type\": \"Article\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#article\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/\"\n\t },\n\t \"author\": {\n\t \"name\": \"migration\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t },\n\t \"headline\": \"How government can rebuild trust in open-source software\",\n\t \"datePublished\": \"2022-09-26T12:47:54+00:00\",\n\t \"dateModified\": \"2026-08-08T05:02:39+00:00\",\n\t \"mainEntityOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/\"\n\t },\n\t \"wordCount\": 1143,\n\t \"commentCount\": 0,\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/original-Cropped.jpg.jpg\",\n\t \"articleSection\": [\n\t \"GovCon\",\n\t \"Home\",\n\t \"Inside the Agencies\",\n\t \"IT & Networks\",\n\t \"Opinion\",\n\t \"Thought Leadership\"\n\t ],\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"CommentAction\",\n\t \"name\": \"Comment\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#respond\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebPage\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/\",\n\t \"name\": \"How government can rebuild trust in open-source software - Federal Times\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\"\n\t },\n\t \"primaryImageOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#primaryimage\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/original-Cropped.jpg.jpg\",\n\t \"datePublished\": \"2022-09-26T12:47:54+00:00\",\n\t \"dateModified\": \"2026-08-08T05:02:39+00:00\",\n\t \"description\": \"Open-source software, which benefits developers by allowing them to streamline management of common features and tasks, can be defended from cyberattacks.\",\n\t \"breadcrumb\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#breadcrumb\"\n\t },\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"ReadAction\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#primaryimage\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/original-Cropped.jpg.jpg\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/original-Cropped.jpg.jpg\"\n\t },\n\t {\n\t \"@type\": \"BreadcrumbList\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/2022\\\/09\\\/26\\\/how-government-can-rebuild-trust-in-open-source-software\\\/#breadcrumb\",\n\t \"itemListElement\": [\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 1,\n\t \"name\": \"Home\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t \"ad_zone\": \"home\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 2,\n\t \"name\": \"IT & Networks\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/it-networks\\\/\",\n\t \"ad_zone\": \"it-networks\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 3,\n\t \"name\": \"How government can rebuild trust in open-source software\"\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebSite\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t \"name\": \"Federal Times\",\n\t \"description\": \"Federal Times\",\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t },\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"SearchAction\",\n\t \"target\": {\n\t \"@type\": \"EntryPoint\",\n\t \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/?s={search_term_string}\"\n\t },\n\t \"query-input\": {\n\t \"@type\": \"PropertyValueSpecification\",\n\t \"valueRequired\": true,\n\t \"valueName\": \"search_term_string\"\n\t }\n\t }\n\t ],\n\t \"inLanguage\": \"en-US\"\n\t },\n\t {\n\t \"@type\": \"Organization\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\",\n\t \"name\": \"Federal Times\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t \"logo\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t \"caption\": \"Federal Times\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t }\n\t },\n\t {\n\t \"@type\": \"Person\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t \"name\": \"migration\",\n\t \"image\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"caption\": \"migration\"\n\t },\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/author\\\/migration\\\/\"\n\t }\n\t ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How government can rebuild trust in open-source software - Federal Times","description":"Open-source software, which benefits developers by allowing them to streamline management of common features and tasks, can be defended from cyberattacks.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"How government can rebuild trust in open-source software","og_description":"Open-source software, which benefits developers by allowing them to streamline management of common features and tasks, can be defended from cyberattacks.","og_url":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/","og_site_name":"Federal Times","article_published_time":"2022-09-26T12:47:54+00:00","article_modified_time":"2026-08-08T05:02:39+00:00","author":"Chris Eng","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Chris Eng","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"How government can rebuild trust in open-source software","datePublished":"2022-09-26T12:47:54+00:00","dateModified":"2026-08-08T05:02:39+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/"},"wordCount":1143,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/original-Cropped.jpg.jpg","articleSection":["GovCon","Home","Inside the Agencies","IT & Networks","Opinion","Thought Leadership"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/","url":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/","name":"How government can rebuild trust in open-source software - Federal Times","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/original-Cropped.jpg.jpg","datePublished":"2022-09-26T12:47:54+00:00","dateModified":"2026-08-08T05:02:39+00:00","description":"Open-source software, which benefits developers by allowing them to streamline management of common features and tasks, can be defended from cyberattacks.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/original-Cropped.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/original-Cropped.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/2022\/09\/26\/how-government-can-rebuild-trust-in-open-source-software\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/federaltimes\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"IT & Networks","item":"https:\/\/one.sightlinemg.com\/federaltimes\/it-networks\/","ad_zone":"it-networks"},{"@type":"ListItem","position":3,"name":"How government can rebuild trust in open-source software"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","name":"Federal Times","description":"Federal Times","publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/federaltimes\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization","name":"Federal Times","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","caption":"Federal Times"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/federaltimes\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Federal Times","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/federaltimes","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/original-Cropped.jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/25862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/comments?post=25862"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/25862\/revisions"}],"predecessor-version":[{"id":25873,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/25862\/revisions\/25873"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/media?parent=25862"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/categories?post=25862"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/tags?post=25862"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/coauthors?post=25862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}