Fact sheet released by CISA provides software security challenges and recommendations to improve security and risk management of OSS use.