Skip to content

@ossf Open Source Security Foundation (OpenSSF)

Change the repository type filter

All

    Repositories list

    73 repositories

    • malicious-packages

      Public
      A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
      Go
      •
      Apache License 2.0
      •60•383•15•6•Updated Oct 13, 2025Oct 13, 2025

    • scorecard-action

      Public
      Official GitHub Action for OpenSSF Scorecard.
      githubsecuritysupply-chaingithub-actionsopenssf-scorecard
      Go
      •
      Apache License 2.0
      •79•338•26•1•Updated Oct 13, 2025Oct 13, 2025

    • fuzz-introspector

      Public
      Fuzz Introspector -- introspect, extend and optimise fuzzers
      testingsecurityfuzz-testingvulnerability-analysissecurity-researchfuzzing
      Python
      •
      Apache License 2.0
      •76•431•103•5•Updated Oct 13, 2025Oct 13, 2025

    • scorecard-webapp

      Public
      Website and API for OpenSSF Scorecard
      openssf-scorecard
      HTML
      •
      Apache License 2.0
      •29•25•35•14•Updated Oct 13, 2025Oct 13, 2025

    • sbom-everywhere

      Public
      Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
      Vue
      •
      Apache License 2.0
      •38•104•22•3•Updated Oct 13, 2025Oct 13, 2025

    • allstar

      Public
      GitHub App to set and enforce security policies
      Go
      •
      Apache License 2.0
      •139•1.4k•60•2•Updated Oct 13, 2025Oct 13, 2025

    • ossf-landscape

      Public
      Apache License 2.0
      •27•30•0•1•Updated Oct 13, 2025Oct 13, 2025

    • gemara

      Public
      Minimizing rework for governance activities.
      Go
      •
      Apache License 2.0
      •10•24•24•0•Updated Oct 13, 2025Oct 13, 2025

    • scorecard

      Public
      OpenSSF Scorecard - Security health metrics for Open Source
      scorecardopenssf-scorecard
      Go
      •
      Apache License 2.0
      •575•5.1k•364•8•Updated Oct 13, 2025Oct 13, 2025

    • scorecard-visualizer

      Public
      Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
      openssfopenssf-scorecard
      TypeScript
      •
      Apache License 2.0
      •6•18•1•11•Updated Oct 13, 2025Oct 13, 2025

    • osv-schema

      Public
      Open Source Vulnerability schema.
      Python
      •
      Apache License 2.0
      •101•211•35•13•Updated Oct 12, 2025Oct 12, 2025

    • security-baseline

      Public
      Go
      •
      Apache License 2.0
      •32•111•49•4•Updated Oct 10, 2025Oct 10, 2025

    • tac

      Public
      Technical Advisory Council
      Other
      •73•131•31•10•Updated Oct 10, 2025Oct 10, 2025

    • ai-ml-security

      Public
      Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
      Apache License 2.0
      •20•113•6•0•Updated Oct 8, 2025Oct 8, 2025

    • education

      Public
      OpenSSF Education SIG
      Apache License 2.0
      •15•18•3•0•Updated Oct 8, 2025Oct 8, 2025

    • wg-best-practices-os-developers

      Public
      The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
      JavaScript
      •
      Apache License 2.0
      •184•931•68•11•Updated Oct 8, 2025Oct 8, 2025

    • alpha-omega

      Public
      Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
      securityopensourceopen-source-security
      Open Policy Agent
      •
      Apache License 2.0
      •60•108•0•2•Updated Oct 6, 2025Oct 6, 2025

    • glossary

      Public
      A reference for common terms when talking about OpenSSF and open source software security.
      JavaScript
      •
      Apache License 2.0
      •4•5•2•6•Updated Oct 6, 2025Oct 6, 2025

    • wg-vulnerability-disclosures

      Public
      The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by helping mature and advocate well-managed vulnerability reporting and communication.
      Apache License 2.0
      •42•201•34•0•Updated Oct 1, 2025Oct 1, 2025

    • wg-securing-software-repos

      Public
      OpenSSF Working Group on Securing Software Repositories
      Other
      •24•121•21•4•Updated Oct 1, 2025Oct 1, 2025

    • wg-orbit

      Public
      ORBIT: Open Resources for Baselines, Interoperability, and Tooling
      Apache License 2.0
      •4•20•9•0•Updated Sep 29, 2025Sep 29, 2025

    • artwork

      Public
      OpenSSF Artwork
      Apache License 2.0
      •10•9•0•0•Updated Sep 18, 2025Sep 18, 2025

    • security-insights

      Public
      Machine-readable specification for the attestation of security-relevant data.
      CUE
      •
      Other
      •14•63•10•1•Updated Sep 16, 2025Sep 16, 2025

    • foundation

      Public
      OpenSSF Governance and Legal Docs
      Apache License 2.0
      •18•73•0•0•Updated Sep 9, 2025Sep 9, 2025

    • security-assessments

      Public
      Apache License 2.0
      •4•15•6•2•Updated Aug 28, 2025Aug 28, 2025

    • wg-globalcyberpolicy

      Public
      Global Cyber Policy Working Group
      Apache License 2.0
      •16•89•9•0•Updated Aug 20, 2025Aug 20, 2025

    • .github

      Public
      Github configuration
      5•3•0•1•Updated Aug 14, 2025Aug 14, 2025

    • Memory-Safety

      Public
      Apache License 2.0
      •17•31•12•0•Updated Aug 14, 2025Aug 14, 2025

    • global-cybersecurity-skills-framework

      Public
      Global CyberSecurity Skills Framework
      Apache License 2.0
      •1•4•2•0•Updated Aug 13, 2025Aug 13, 2025

    • secure-sw-dev-fundamentals

      Public
      Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
      CSS
      •
      Creative Commons Attribution 4.0 International
      •51•196•34•2•Updated Jul 30, 2025Jul 30, 2025