Who Checked It? Attestations, Gemara, and CRA Due Diligence

Open Source Security Foundation Version 1 original current

Imported from official source

Discover how the OpenSSF Gemara project clarifies the complex world of security attestations, streamlines software supply chain evaluations, and helps organizations confidently meet EU Cyber Resilience Act (CRA) due diligence requirements.

This version

Version
1 of 1
Recorded
October 22, 2026 13:00
Change
Initial
Content hash
d3ba11406b3240f0bcde49b9b8dd76c4
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.