Skip to content

@ossf Open Source Security Foundation (OpenSSF)

Change the repository type filter

All

    Repositories list

    72 repositories

    • malicious-packages

      Public
      A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
      Go
      •
      Apache License 2.0
      •44•324•14•6•Updated Aug 9, 2025Aug 9, 2025

    • wg-best-practices-os-developers

      Public
      The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
      JavaScript
      •
      Apache License 2.0
      •174•903•62•12•Updated Aug 8, 2025Aug 8, 2025

    • scorecard-webapp

      Public
      Website and API for OpenSSF Scorecard
      openssf-scorecard
      HTML
      •
      Apache License 2.0
      •29•24•34•11•Updated Aug 8, 2025Aug 8, 2025

    • ossf-landscape

      Public
      Apache License 2.0
      •27•30•0•1•Updated Aug 8, 2025Aug 8, 2025

    • security-baseline

      Public
      Go
      •
      Apache License 2.0
      •28•100•41•5•Updated Aug 8, 2025Aug 8, 2025

    • scorecard-action

      Public
      Official GitHub Action for OpenSSF Scorecard.
      githubsecuritysupply-chaingithub-actionsopenssf-scorecard
      Go
      •
      Apache License 2.0
      •76•324•26•4•Updated Aug 7, 2025Aug 7, 2025

    • osv-schema

      Public
      Open Source Vulnerability schema.
      Go
      •
      Apache License 2.0
      •98•206•33•16•Updated Aug 7, 2025Aug 7, 2025

    • scorecard

      Public
      OpenSSF Scorecard - Security health metrics for Open Source
      scorecardopenssf-scorecard
      Go
      •
      Apache License 2.0
      •565•5k•360•24•Updated Aug 6, 2025Aug 6, 2025

    • tac

      Public
      Technical Advisory Council
      Other
      •72•129•26•13•Updated Aug 6, 2025Aug 6, 2025

    • sbom-everywhere

      Public
      Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
      Vue
      •
      Apache License 2.0
      •37•99•22•2•Updated Aug 5, 2025Aug 5, 2025

    • alpha-omega

      Public
      Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
      securityopensourceopen-source-security
      Open Policy Agent
      •
      Apache License 2.0
      •59•107•52•5•Updated Aug 4, 2025Aug 4, 2025

    • scorecard-visualizer

      Public
      Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
      openssfopenssf-scorecard
      TypeScript
      •
      Apache License 2.0
      •6•16•1•11•Updated Aug 4, 2025Aug 4, 2025

    • allstar

      Public
      GitHub App to set and enforce security policies
      Go
      •
      Apache License 2.0
      •131•1.4k•71•1•Updated Aug 3, 2025Aug 3, 2025

    • wg-vulnerability-disclosures

      Public
      The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by helping mature and advocate well-managed vulnerability reporting and communication.
      Apache License 2.0
      •43•194•31•2•Updated Aug 1, 2025Aug 1, 2025

    • secure-sw-dev-fundamentals

      Public
      Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
      CSS
      •
      Creative Commons Attribution 4.0 International
      •52•197•34•2•Updated Jul 30, 2025Jul 30, 2025

    • artwork

      Public
      OpenSSF Artwork
      Apache License 2.0
      •10•9•0•0•Updated Jul 30, 2025Jul 30, 2025

    • foundation

      Public
      OpenSSF Governance and Legal Docs
      Apache License 2.0
      •17•72•0•0•Updated Jul 29, 2025Jul 29, 2025

    • fuzz-introspector

      Public
      Fuzz Introspector -- introspect, extend and optimise fuzzers
      testingsecurityfuzz-testingvulnerability-analysissecurity-researchfuzzing
      Python
      •
      Apache License 2.0
      •73•424•102•1•Updated Jul 21, 2025Jul 21, 2025

    • security-insights

      Public
      Machine-readable specification for the attestation of security-relevant data.
      CUE
      •
      Other
      •14•60•10•1•Updated Jul 19, 2025Jul 19, 2025

    • global-cybersecurity-skills-framework

      Public
      Global CyberSecurity Skills Framework
      Apache License 2.0
      •1•0•0•1•Updated Jul 18, 2025Jul 18, 2025

    • Memory-Safety

      Public
      Apache License 2.0
      •15•28•12•1•Updated Jul 10, 2025Jul 10, 2025

    • ai-ml-security

      Public
      Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
      Apache License 2.0
      •15•103•4•0•Updated Jul 9, 2025Jul 9, 2025

    • wg-security-tooling

      Public
      OpenSSF Security Tooling Working Group
      Apache License 2.0
      •52•313•18•0•Updated Jul 6, 2025Jul 6, 2025

    • wg-globalcyberpolicy

      Public
      Global Cyber Policy Working Group
      Apache License 2.0
      •15•79•9•2•Updated Jul 1, 2025Jul 1, 2025

    • model-signing-spec

      Public
      Model Signing Specification
      Apache License 2.0
      •1•3•1•0•Updated Jun 24, 2025Jun 24, 2025

    • glossary

      Public
      A reference for common terms when talking about OpenSSF and open source software security.
      JavaScript
      •
      Apache License 2.0
      •3•4•2•3•Updated Jun 23, 2025Jun 23, 2025

    • toolbelt

      Public
      Apache License 2.0
      •5•22•0•0•Updated Jun 10, 2025Jun 10, 2025

    • si-tooling

      Public
      Python
      •
      Apache License 2.0
      •3•5•1•1•Updated Jun 10, 2025Jun 10, 2025

    • wg-orbit

      Public
      ORBIT: Open Resources for Baselines, Interoperability, and Tooling
      Apache License 2.0
      •4•16•7•1•Updated Jun 7, 2025Jun 7, 2025

    • education

      Public
      OpenSSF Education SIG
      Apache License 2.0
      •15•17•3•0•Updated May 28, 2025May 28, 2025