Securing Open Source Software Act of 2023

[AI summary unavailable — showing source text] Securing Open Source Software Act of 2023 This bill sets forth the duties of the Cybersecurity and Infrastructure Security Agency (CISA) regarding open source software security. Open source software means software for which the human-readable source code is made available to the public for use, study, reuse, modification, enhancement, and redistribution. Specifically, CISA must perform outreach and engagement to bolster the security of open source software; support federal efforts to strengthen open source software security; coordinate with nonfederal entities on efforts to ensure long-term open source software security; serve as a public point of contact regarding open source software security for nonfederal entities; and support federal and nonfederal supply chain security efforts by encouraging efforts to bolster open source software security. CISA must (1) publish a framework, incorporating government, private sector, and open source software community frameworks and best practices, for assessing the risk of open source software components; (2) update the framework at least annually; and (3) ensure, to the greatest extent practicable, that the framework is usable by the open so…