Discover ossf/project-template Open Source project

Stars
16
Rank 1,311,288 (Top 26 %)
Language
License
Apache License 2.0
Created over 4 years ago
Updated 12 months ago

ossf

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

OpenSSF Project Template

scorecard

OpenSSF Scorecard - Security health metrics for Open Source

4,323

criticality_score

Gives criticality score for an open source project

1,307

allstar

GitHub App to set and enforce security policies

1,232

package-analysis

Open Source Package Analysis

718

wg-best-practices-os-developers

The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.

JavaScript

689

fuzz-introspector

Fuzz Introspector -- introspect, extend and optimise fuzzers

Python

359

wg-securing-critical-projects

Helping allocate resources to secure the critical open source projects we all depend on.

318

wg-security-tooling

OpenSSF Security Tooling Working Group

295

scorecard-action

Official GitHub Action for OpenSSF Scorecard.

244

malicious-packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

229

wg-metrics-and-metadata

The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed confidence in the security of open source projects. We do this by collecting, curating, and communicating relevant metrics and metadata from open source projects and the ecosystems of which they are a part.

222

wg-vulnerability-disclosures

The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by helping mature and advocate well-managed vulnerability reporting and communication.

177

wg-supply-chain-integrity

Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the code they maintain, produce and use.

176

s2c2f

The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to securely consume Open Source Software (OSS) dependencies into the developer’s workflow.

173

osv-schema

Open Source Vulnerability schema.

Python

173

secure-sw-dev-fundamentals

Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)

CSS

168

package-manager-best-practices

Collection of security best practices for package managers.

157

census

📜Automated review of open source software projects

HTML

116

tac

Technical Advisory Council

106

security-reviews

A community collection of security reviews of open source software components.

Python

wg-securing-software-repos

OpenSSF Working Group on Securing Software Repositories

alpha-omega

Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.

Open Policy Agent

package-feeds

Feed parsing for language package manager updates

sbom-everywhere

Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption

Vue

foundation

OpenSSF Governance and Legal Docs

Project-Security-Metrics

Collect, curate, and communicate relevant security metrics for open source projects.

Python

great-mfa-project

The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute hardware MFA tokens to critical open source software (OSS) projects.

security-insights-spec

OPENSSF SECURITY INSIGHTS: Repository for development of the draft standard, where requests for modification should be made via Github Issues.

ai-ml-security

Potential WG on Artificial Intelligence and Machine Learning (AI/ML)

scorecard-monitor

Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts

JavaScript

wg-endusers

OpenSSF Endusers Working Group

ossf-landscape

scorecard-webapp

Website and API for OpenSSF Scorecard

HTML

DevRel-community

Evangelizing the mission and work of the OpenSSF and building strong community outreach around end-users, open-source maintainers, and contributors.

toolbelt

education

OpenSSF Education SIG

Memory-Safety

omega-triage-portal

Python

scorecard-visualizer

Tool for visualizing the Open SSF Scorecard Api data in a human friendly way

TypeScript

Diagrammers-Society

OpenSSF Diagrammers Society

OpenVEX

Vuln Disclosure WG's new SIG

SIRT

The OSS-SIRT SIG (Open Source Software Security Incident Response Team Special Interest Group) is a group working within the OSSF's Vulnerability Disclosure Working Group that is focused on creating secure vulnerability management capabilities within the open source ecosystem to ensure effective coordinated vulnerability disclosure practices (CVD)

community

artwork

OpenSSF Artwork

gb-planning-committee

The Governing Board Planning Committee guides OpenSSF vision and planning including mission, roadmap, milestones and key metrics for success of the overall organization.

oss-researcher-vulnerability-guide

oss-compromises

Archive of various open source security compromises

github-org-access-scraper

GitHub lacks an API for listing an org's repos' access for non-team-based individuals, so, scrape it.

vulnerability-disclosures-whitepaper

S2C2F-attestation-schema-and-tool

Secure Supply Chain Consumption Framework (S2C2F) OSCAL Catalog and tool

Python

Governance-Committee

Governance Committee

disclosure-check

Python

wg-dei

The Diversity, Equity, and Inclusion Working Group was formed in December 2023 to help increase representation and strengthen the overall effectiveness of the cybersecurity workforce.

si-tooling

Python

security-metrics-dashboard

homebrew-tap

open-auto-vuln-disclose

Python

omega-moderne-client

Python

outreach

A place to connect about event and conference engagements

action-web-defn-check

GitHub action for checking a Web Application Definition file

.github

Github configuration

oss-analysis-census2-prototype

Prototype of Census 2 of open source software (NOT MAINTAINED)

Python

scorecard-dependencyanalysis

Scorecard action for checking when new dependencies are added to the repository.

ossf/project-template

ossf

Reviews

Repository Details

More Repositories