How open source projects and stewards can help manufacturers to achieve due diligence#

• Voluntary attestation
• Provide security history
• Maintain security process description and evidence it is followed