Skip to content

@ossf Open Source Security Foundation (OpenSSF)

Change the repository type filter

All

    Repositories list

    74 repositories

    • malicious-packages

      Public
      A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
      Go
      •
      Apache License 2.0
      •63•389•14•7•Updated Oct 28, 2025Oct 28, 2025

    • security-baseline

      Public
      Go
      •
      Apache License 2.0
      •32•112•51•2•Updated Oct 28, 2025Oct 28, 2025

    • osv-schema

      Public
      Open Source Vulnerability schema.
      Go
      •
      Apache License 2.0
      •103•212•34•11•Updated Oct 28, 2025Oct 28, 2025

    • scorecard-action

      Public
      Official GitHub Action for OpenSSF Scorecard.
      githubsecuritysupply-chaingithub-actionsopenssf-scorecard
      Go
      •
      Apache License 2.0
      •78•338•26•3•Updated Oct 27, 2025Oct 27, 2025

    • fuzz-introspector

      Public
      Fuzz Introspector -- introspect, extend and optimise fuzzers
      testingsecurityfuzzingfuzz-testingvulnerability-analysissecurity-research
      Python
      •
      Apache License 2.0
      •76•431•103•0•Updated Oct 27, 2025Oct 27, 2025

    • scorecard-webapp

      Public
      Website and API for OpenSSF Scorecard
      openssf-scorecard
      Go
      •
      Apache License 2.0
      •29•25•35•16•Updated Oct 27, 2025Oct 27, 2025

    • scorecard

      Public
      OpenSSF Scorecard - Security health metrics for Open Source
      scorecardopenssf-scorecard
      Go
      •
      Apache License 2.0
      •579•5.1k•365•5•Updated Oct 27, 2025Oct 27, 2025

    • tac

      Public
      Technical Advisory Council
      Other
      •73•132•33•11•Updated Oct 27, 2025Oct 27, 2025

    • allstar

      Public
      GitHub App to set and enforce security policies
      Go
      •
      Apache License 2.0
      •141•1.4k•60•0•Updated Oct 27, 2025Oct 27, 2025

    • gemara

      Public
      Minimizing rework for governance activities.
      Go
      •
      Apache License 2.0
      •13•25•24•2•Updated Oct 27, 2025Oct 27, 2025

    • glossary

      Public
      A reference for common terms when talking about OpenSSF and open source software security.
      JavaScript
      •
      Apache License 2.0
      •4•5•2•6•Updated Oct 27, 2025Oct 27, 2025

    • scorecard-visualizer

      Public
      Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
      openssfopenssf-scorecard
      TypeScript
      •
      Apache License 2.0
      •6•18•1•11•Updated Oct 27, 2025Oct 27, 2025

    • wg-best-practices-os-developers

      Public
      The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
      JavaScript
      •
      Apache License 2.0
      •185•940•67•12•Updated Oct 23, 2025Oct 23, 2025

    • ossf-landscape

      Public
      Apache License 2.0
      •27•30•0•1•Updated Oct 22, 2025Oct 22, 2025

    • wg-securing-software-repos

      Public
      OpenSSF Working Group on Securing Software Repositories
      Other
      •25•122•21•3•Updated Oct 21, 2025Oct 21, 2025

    • sbom-everywhere

      Public
      Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
      Vue
      •
      Apache License 2.0
      •38•105•22•5•Updated Oct 21, 2025Oct 21, 2025

    • ai-ml-security

      Public
      Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
      Apache License 2.0
      •20•114•6•1•Updated Oct 17, 2025Oct 17, 2025

    • education

      Public
      OpenSSF Education SIG
      Apache License 2.0
      •16•18•4•1•Updated Oct 17, 2025Oct 17, 2025

    • alpha-omega

      Public
      Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
      securityopensourceopen-source-security
      Open Policy Agent
      •
      Apache License 2.0
      •61•108•0•3•Updated Oct 6, 2025Oct 6, 2025

    • wg-vulnerability-disclosures

      Public
      The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by helping mature and advocate well-managed vulnerability reporting and communication.
      Apache License 2.0
      •42•201•34•0•Updated Oct 1, 2025Oct 1, 2025

    • wg-orbit

      Public
      ORBIT: Open Resources for Baselines, Interoperability, and Tooling
      Apache License 2.0
      •4•20•9•0•Updated Sep 29, 2025Sep 29, 2025

    • artwork

      Public
      OpenSSF Artwork
      Apache License 2.0
      •10•9•0•0•Updated Sep 18, 2025Sep 18, 2025

    • security-insights

      Public
      Machine-readable specification for the attestation of security-relevant data.
      CUE
      •
      Other
      •14•63•10•1•Updated Sep 16, 2025Sep 16, 2025

    • foundation

      Public
      OpenSSF Governance and Legal Docs
      Apache License 2.0
      •18•73•0•0•Updated Sep 9, 2025Sep 9, 2025

    • security-assessments

      Public
      Apache License 2.0
      •4•15•6•2•Updated Aug 28, 2025Aug 28, 2025

    • wg-globalcyberpolicy

      Public
      Global Cyber Policy Working Group
      Apache License 2.0
      •16•90•9•0•Updated Aug 20, 2025Aug 20, 2025

    • .github

      Public
      Github configuration
      6•2•0•1•Updated Aug 14, 2025Aug 14, 2025

    • Memory-Safety

      Public
      Apache License 2.0
      •17•31•12•0•Updated Aug 14, 2025Aug 14, 2025

    • global-cybersecurity-skills-framework

      Public
      Global CyberSecurity Skills Framework
      Apache License 2.0
      •1•4•2•0•Updated Aug 13, 2025Aug 13, 2025

    • secure-sw-dev-fundamentals

      Public
      Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
      CSS
      •
      Creative Commons Attribution 4.0 International
      •52•197•34•3•Updated Jul 30, 2025Jul 30, 2025