A Salesforce team decides to adopt an open source tool. The evaluation stops at whether it works, because the person testing it is solving a delivery problem and nobody owns the question of what else it can reach.
Open source is how most Salesforce teams get capabilities they could never get approved as a purchase, and treating it as free is not the same as treating it as safe. The practices that separate those two are not complicated, but they get applied inconsistently, and the gaps surface only after something runs with production credentials.
This session follows a single adoption decision from first install to steady state. Attendees see how to read a project for maintenance and publisher signals before trusting it, why a pinned version behaves differently from a floating tag in a pipeline, what credentials the tool actually needs and how to grant it less, where secrets slip into a repository during ordinary work, and how to keep it patched once it is load bearing.
Attendees will leave with a review standard they can apply to any open source project their team adopts, and the argument for why open source becomes the more defensible choice when it is operated deliberately.
Nicolas Vuillamy is CTO France at Cloudity and creator of the open source projects sfdx-hardis and MegaLinter. He joins host Matt Meyers, CTA and CoFounder and CEO of EzProtect. Bring your toughest Salesforce security questions, because Nicolas and Matt will take them live.
Register for this event and we will see you online.