CISA launches repository for self-attestation forms from software producers to be used in federal procurement

The Cybersecurity and Infrastructure Security Agency has established a repository where software producers will be able to submit a common form developed by CISA and the Office of Management and Budget for self-attesting the adoption of secure software development practices.

The repository launch follows the release on March 11 of the final secure software self-attestation common form. The repository will also allow software producers to submit artifacts.

The form is based on practices derived from the NIST Secure Software...