Trusted OSS Analysis and TTP Automation for Secure Software Enclaves

Open Source Software (OSS) is essential to modern software development but poses serious security risks, including vulnerabilities, license issues, and potential tampering by foreign actors. The Department of the Air Force lacks standardized methods to assess these risks within software development enclaves, making it difficult to ensure secure operations under the Risk Management Framework and Zero Trust mandates.In this Phase I effort, Lineaje will develop and validate automated Tactics, Techniques, and Procedures (TTPs) for OSS risk analysis. Using its existing platform, Lineaje will demonstrate the ability to generate Software Bills of Materials (SBOMs), detect vulnerabilities and foreign-influenced code, assess license compliance, and apply AI-driven remediation for unpatched components.Lineaje will test this approach across 10 to 20 representative DoD systems and deliver a working prototype, risk reports, and draft TTPs. This solution will provide cybersecurity teams with a scalable framework to vet OSS, reduce software supply chain risk, and support secure and efficient software development across the Air Force.