Skip to content

@ossf Open Source Security Foundation (OpenSSF)

Change the repository type filter

All

    Repositories list

    73 repositories

    • fuzz-introspector

      Public
      Fuzz Introspector -- introspect, extend and optimise fuzzers
      testingsecurityfuzz-testingvulnerability-analysissecurity-researchfuzzing
      Python
      •
      Apache License 2.0
      •73•426•103•3•Updated Aug 19, 2025Aug 19, 2025

    • scorecard-webapp

      Public
      Website and API for OpenSSF Scorecard
      openssf-scorecard
      HTML
      •
      Apache License 2.0
      •29•24•34•12•Updated Aug 19, 2025Aug 19, 2025

    • malicious-packages

      Public
      A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
      Go
      •
      Apache License 2.0
      •45•326•14•6•Updated Aug 19, 2025Aug 19, 2025

    • scorecard-action

      Public
      Official GitHub Action for OpenSSF Scorecard.
      githubsecuritysupply-chaingithub-actionsopenssf-scorecard
      Go
      •
      Apache License 2.0
      •76•327•26•3•Updated Aug 18, 2025Aug 18, 2025

    • allstar

      Public
      GitHub App to set and enforce security policies
      Go
      •
      Apache License 2.0
      •133•1.4k•62•0•Updated Aug 18, 2025Aug 18, 2025

    • osv-schema

      Public
      Open Source Vulnerability schema.
      Go
      •
      Apache License 2.0
      •99•206•33•14•Updated Aug 18, 2025Aug 18, 2025

    • scorecard-visualizer

      Public
      Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
      openssfopenssf-scorecard
      TypeScript
      •
      Apache License 2.0
      •6•16•1•9•Updated Aug 17, 2025Aug 17, 2025

    • gemara

      Public
      Minimizing rework for governance activities.
      Go
      •
      Apache License 2.0
      •7•9•19•3•Updated Aug 16, 2025Aug 16, 2025

    • security-baseline

      Public
      Go
      •
      Apache License 2.0
      •29•103•41•7•Updated Aug 15, 2025Aug 15, 2025

    • .github

      Public
      Github configuration
      5•3•0•1•Updated Aug 14, 2025Aug 14, 2025

    • Memory-Safety

      Public
      Apache License 2.0
      •17•30•12•0•Updated Aug 14, 2025Aug 14, 2025

    • ossf-landscape

      Public
      Apache License 2.0
      •27•30•0•0•Updated Aug 14, 2025Aug 14, 2025

    • global-cybersecurity-skills-framework

      Public
      Global CyberSecurity Skills Framework
      Apache License 2.0
      •1•1•0•0•Updated Aug 13, 2025Aug 13, 2025

    • foundation

      Public
      OpenSSF Governance and Legal Docs
      Apache License 2.0
      •17•72•0•0•Updated Aug 13, 2025Aug 13, 2025

    • wg-best-practices-os-developers

      Public
      The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
      JavaScript
      •
      Apache License 2.0
      •178•905•62•16•Updated Aug 13, 2025Aug 13, 2025

    • tac

      Public
      Technical Advisory Council
      Other
      •72•129•27•11•Updated Aug 12, 2025Aug 12, 2025

    • wg-globalcyberpolicy

      Public
      Global Cyber Policy Working Group
      Apache License 2.0
      •15•79•7•2•Updated Aug 12, 2025Aug 12, 2025

    • scorecard

      Public
      OpenSSF Scorecard - Security health metrics for Open Source
      scorecardopenssf-scorecard
      Go
      •
      Apache License 2.0
      •565•5k•360•26•Updated Aug 12, 2025Aug 12, 2025

    • sbom-everywhere

      Public
      Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
      Vue
      •
      Apache License 2.0
      •37•99•22•2•Updated Aug 5, 2025Aug 5, 2025

    • alpha-omega

      Public
      Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
      securityopensourceopen-source-security
      Open Policy Agent
      •
      Apache License 2.0
      •59•107•52•7•Updated Aug 4, 2025Aug 4, 2025

    • wg-vulnerability-disclosures

      Public
      The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by helping mature and advocate well-managed vulnerability reporting and communication.
      Apache License 2.0
      •43•195•31•2•Updated Aug 1, 2025Aug 1, 2025

    • secure-sw-dev-fundamentals

      Public
      Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
      CSS
      •
      Creative Commons Attribution 4.0 International
      •52•197•34•2•Updated Jul 30, 2025Jul 30, 2025

    • artwork

      Public
      OpenSSF Artwork
      Apache License 2.0
      •10•9•0•0•Updated Jul 30, 2025Jul 30, 2025

    • security-insights

      Public
      Machine-readable specification for the attestation of security-relevant data.
      CUE
      •
      Other
      •14•60•10•1•Updated Jul 19, 2025Jul 19, 2025

    • ai-ml-security

      Public
      Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
      Apache License 2.0
      •16•103•4•0•Updated Jul 9, 2025Jul 9, 2025

    • wg-security-tooling

      Public
      OpenSSF Security Tooling Working Group
      Apache License 2.0
      •52•313•18•0•Updated Jul 6, 2025Jul 6, 2025

    • model-signing-spec

      Public
      Model Signing Specification
      Apache License 2.0
      •1•3•1•0•Updated Jun 24, 2025Jun 24, 2025

    • glossary

      Public
      A reference for common terms when talking about OpenSSF and open source software security.
      JavaScript
      •
      Apache License 2.0
      •3•4•2•3•Updated Jun 23, 2025Jun 23, 2025

    • toolbelt

      Public
      Apache License 2.0
      •5•22•0•0•Updated Jun 10, 2025Jun 10, 2025

    • si-tooling

      Public
      Python
      •
      Apache License 2.0
      •3•5•1•1•Updated Jun 10, 2025Jun 10, 2025