
← What's in the SOSS? An OpenSSF Podcast25 ago · 19 min
Private Forks, CRA Deadlines, and the True Cost of Open Source Compliance with Dave Russo
Private Forks, CRA Deadlines, and the True Cost of Open Source Compliance with Dave Russo
In this episode of What's in the SOSS, host Sally Cooper sits down with returning champion Dave Russo, Policy and Standards Lead at Red Hat’s Open Source and AI Program Office, to unpack the European Union’s Cyber Resilience Act (CRA). Together, they explore the stark realities of the 2026 CRA Awareness and Readiness Report, exposing why three-quarters of North American tech companies remain completely unaware of the strictest cybersecurity mandate in history. Dave breaks down the hidden $250...