_posts/2022-04-25-supporter-spotlight-google-open-source-security-team.md → _posts/2022-04-26-supporter-spotlight-google-open-source-security-team.md

 ---
 layout: post
 title: "Supporter spotlight: Google Open Source Security Team (GOSST)"
-date: 2022-04-25 10:00:00
+date: 2022-04-26 10:00:00
 categories: org
-draft: true
 ---
 
 [![]({{ "/images/news/supporter-spotlight-gosst/gosst.png?2#right" | relative_url }})](https://security.googleblog.com/)
@@ -43,7 +42,7 @@ making the open source software that everyone relies on more secure.
 
 Meder: The range of initiatives that the team is involved in recognizes the
 diversity of the ecosystem and unique challenges that projects face on their
-security journey. For example, our sponsorship of [sos.dev](http://sos.dev/)
+security journey. For example, our sponsorship of [*sos.dev*](http://sos.dev/)
 ensures that developers are rewarded for security improvements to open source
 projects, whilst the long term work on improving
 [Linux kernel security](http://sec.org/wiki/index.php/Kernel_Self_Protection_Project)
@@ -85,8 +84,9 @@ to their near-universal adoption; users do not download and compile their own
 software anymore.  GOSST is starting to work with package managers to explore
 ways to collaborate together on  improving the state of the supply chain and
 helping package maintainers and application developers do better… all with the
-understanding that many open source projects are developed in spare time as a hobby!
-Solutions like [this](https://security.googleblog.com/2022/04/improving-software-supply-chain.html),
+understanding that many open source projects are developed in spare time as a
+hobby!
+[Solutions like this](https://security.googleblog.com/2022/04/improving-software-supply-chain.html),
 which are the result of [collaboration between GOSST and GitHub](https://github.blog/2022-04-07-slsa-3-compliance-with-github-actions/),
 are very encouraging as they demonstrate a way to materially strengthen
 software supply chain security with readily available tools, while also
@@ -120,8 +120,8 @@ make reproducibility part of everyone's software consumption practices.
 
 [![]({{ "/images/news/supporter-spotlight-gosst/gosst.png#right" | relative_url }})](https://security.googleblog.com/)
 
-**Chris: If someone wanted to know more about GOSST or follow the team's work,
-where might they go to look?**
+**Chris: So if someone wanted to know more about GOSST or follow the team's
+work, where might they go to look?**
 
 Meder: We post regular updates on [Google's Security Blog](https://security.googleblog.com/)
 and on the [Linux hardening mailing list](https://lore.kernel.org/linux-hardening/).