Skip to content
@ossf

Open Source Security Foundation (OpenSSF)

OpenSSF is a community of software developers and security engineers who are working together to secure open source software for the greater public good.
README.md

OpenSSFLogo

OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all.

OpenSSF is part of the nonprofit Linux Foundation.

For any questions, concerns, reports, etc., please email operations@openssf.org.

Communicating

Most communications happen in the following locations:

Membership

We encourage all individual contributors to work with their employers to become members. We aim to grow an active, healthy community of contributors, reviewers, and code owners. Learn more about the requirements and responsibilities of membership in our Membership page or see current members.

Pinned Loading

  1. wg-best-practices-os-developers wg-best-practices-os-developers Public

    The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.

    JavaScript 785 138

  2. ai-ml-security ai-ml-security Public

    Potential WG on Artificial Intelligence and Machine Learning (AI/ML)

    56 10

  3. wg-securing-critical-projects wg-securing-critical-projects Public

    Helping allocate resources to secure the critical open source projects we all depend on.

    334 40

  4. wg-securing-software-repos wg-securing-software-repos Public

    OpenSSF Working Group on Securing Software Repositories

    93 19

  5. tac tac Public

    Technical Advisory Council

    109 60

  6. foundation foundation Public

    OpenSSF Governance and Legal Docs

    70 19

Repositories

Showing 10 of 67 repositories
  • package-analysis Public

    Open Source Package Analysis

    ossf/package-analysis’s past year of commit activity
    Go 760 Apache-2.0 52 59 (5 issues need help) 10 Updated Dec 20, 2024
  • malicious-packages Public

    A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

    ossf/malicious-packages’s past year of commit activity
    Go 267 Apache-2.0 24 12 8 Updated Dec 20, 2024
  • criticality_score Public

    Gives criticality score for an open source project

    ossf/criticality_score’s past year of commit activity
    Go 1,341 Apache-2.0 119 41 33 Updated Dec 20, 2024
  • security-baseline Public
    ossf/security-baseline’s past year of commit activity
    Go 9 Apache-2.0 11 29 (3 issues need help) 16 Updated Dec 19, 2024
  • wg-globalcyberpolicy Public

    Global Cyber Policy Working Group

    ossf/wg-globalcyberpolicy’s past year of commit activity
    2 Apache-2.0 3 2 (1 issue needs help) 0 Updated Dec 19, 2024
  • scorecard-webapp Public

    Website and API for OpenSSF Scorecard

    ossf/scorecard-webapp’s past year of commit activity
    HTML 22 Apache-2.0 27 31 (1 issue needs help) 12 Updated Dec 19, 2024
  • allstar Public

    GitHub App to set and enforce security policies

    ossf/allstar’s past year of commit activity
    Go 1,263 Apache-2.0 124 67 (21 issues need help) 1 Updated Dec 18, 2024
  • scorecard-action Public

    Official GitHub Action for OpenSSF Scorecard.

    ossf/scorecard-action’s past year of commit activity
    Go 271 Apache-2.0 71 27 (1 issue needs help) 4 Updated Dec 18, 2024
  • scorecard-visualizer Public

    Tool for visualizing the Open SSF Scorecard Api data in a human friendly way

    ossf/scorecard-visualizer’s past year of commit activity
    TypeScript 12 Apache-2.0 3 1 21 Updated Dec 18, 2024
  • wg-dei Public

    The Diversity, Equity, and Inclusion Working Group mission is to increase representation and strengthen the overall effectiveness of the cybersecurity workforce.

    ossf/wg-dei’s past year of commit activity
    5 Apache-2.0 1 6 2 Updated Dec 18, 2024
View all repositories