The Linux Foundation and OpenSSF Release Report on the State of Education in Secure Software Development

Linux Foundation Research and the Open Source Security Foundation (OpenSSF) released a survey-based report on secure software development education, finding significant knowledge gaps among developers, with time constraints and lack of training as key barriers, and widespread reliance on self-directed and on-the-job learning. The report emphasizes the need for industry-wide education initiatives, highlights AI and software supply chain security as emerging priorities, and points to OpenSSF’s free Developing Secure Software course and a forthcoming security architecture course to promote security-by-design.