Skip to content

@ossf Open Source Security Foundation (OpenSSF)

Change the repository type filter

All

    Repositories list

    79 repositories

    • malicious-packages

      Public
      A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
      Go
      •
      Apache License 2.0
      •88•499•22•7•Updated May 4, 2026May 4, 2026

    • cve-bin-tool

      Public
      The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl…
      pythonsecurityvulnerability
      pythonsecurityvulnerabilityvulnerabilitiescvehacktoberfestcvsssecurity-automationsecurity-toolsdevsecops
      Python
      •
      GNU General Public License v3.0
      •619•1.7k•147•57•Updated May 4, 2026May 4, 2026

    • pvtr-github-repo-scanner

      Public
      Privateer plugin for scanning the security hygiene of a GitHub repository.
      Go
      •
      Apache License 2.0
      •12•23•21•7•Updated May 4, 2026May 4, 2026

    • security-assessments

      Public
      Apache License 2.0
      •7•18•7•1•Updated May 3, 2026May 3, 2026

    • ossf-landscape

      Public
      Apache License 2.0
      •28•31•0•3•Updated May 3, 2026May 3, 2026

    • alpha-omega

      Public
      Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
      securityopensourceopen-source-security
      securityopensourceopen-source-security
      Open Policy Agent
      •
      Apache License 2.0
      •63•125•0•1•Updated May 1, 2026May 1, 2026

    • ai-ml-security

      Public
      Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security
      Apache License 2.0
      •25•167•12•0•Updated May 1, 2026May 1, 2026

    • scorecard

      Public
      OpenSSF Scorecard - Security health metrics for Open Source
      scorecardopenssf-scorecard
      scorecardopenssf-scorecard
      Go
      •
      Apache License 2.0
      •644•5.4k•364•27•Updated Apr 29, 2026Apr 29, 2026

    • scorecard-webapp

      Public
      Website and API for OpenSSF Scorecard
      openssf-scorecard
      openssf-scorecard
      Go
      •
      Apache License 2.0
      •30•28•32•30•Updated Apr 29, 2026Apr 29, 2026

    • oss-crs

      Public
      oss-crs
      Python
      •
      MIT License
      •6•60•28•5•Updated Apr 29, 2026Apr 29, 2026

    • scorecard-action

      Public
      Official GitHub Action for OpenSSF Scorecard.
      githubsecuritysupply-chain
      githubsecuritysupply-chaingithub-actionsopenssf-scorecard
      Go
      •
      Apache License 2.0
      •84•376•30•13•Updated Apr 29, 2026Apr 29, 2026

    • osv-schema

      Public
      Open Source Vulnerability schema.
      Go
      •
      Apache License 2.0
      •115•247•49•7•Updated Apr 28, 2026Apr 28, 2026

    • tac

      Public
      Technical Advisory Council
      Other
      •80•143•39•15•Updated Apr 28, 2026Apr 28, 2026

    • allstar

      Public
      GitHub App to set and enforce security policies
      Go
      •
      Apache License 2.0
      •145•1.4k•58•0•Updated Apr 28, 2026Apr 28, 2026

    • si-tooling

      Public
      Python
      •
      Apache License 2.0
      •4•9•2•0•Updated Apr 28, 2026Apr 28, 2026

    • .github

      Public
      Github configuration
      7•2•0•1•Updated Apr 27, 2026Apr 27, 2026

    • security-baseline

      Public
      Go
      •
      Apache License 2.0
      •40•153•57•3•Updated Apr 27, 2026Apr 27, 2026

    • scorecard-visualizer

      Public
      Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
      openssfopenssf-scorecard
      openssfopenssf-scorecard
      TypeScript
      •
      Apache License 2.0
      •6•18•1•13•Updated Apr 27, 2026Apr 27, 2026

    • scorecard-monitor

      Public
      Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
      securitysecurity-auditsecurity-tools
      securitysecurity-auditsecurity-toolsgithub-actionsopen-source-managementopenssf-scorecard
      JavaScript
      •
      Apache License 2.0
      •14•48•14•4•Updated Apr 25, 2026Apr 25, 2026

    • wg-best-practices-os-developers

      Public
      The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
      JavaScript
      •
      Apache License 2.0
      •195•1k•79•13•Updated Apr 24, 2026Apr 24, 2026

    • sig-basejump

      Public
      Python
      •
      Apache License 2.0
      •0•2•0•4•Updated Apr 21, 2026Apr 21, 2026

    • fuzz-introspector

      Public
      Fuzz Introspector -- introspect, extend and optimise fuzzers
      testingsecurityfuzzing
      testingsecurityfuzzingfuzz-testingvulnerability-analysissecurity-research
      Python
      •
      Apache License 2.0
      •85•454•109•10•Updated Apr 21, 2026Apr 21, 2026

    • wg-globalcyberpolicy

      Public
      Global Cyber Policy Working Group
      Apache License 2.0
      •20•112•16•0•Updated Apr 21, 2026Apr 21, 2026

    • oss-vulnerability-guide

      Public
      A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disclosure notifications.
      Creative Commons Attribution 4.0 International
      •43•137•5•1•Updated Apr 20, 2026Apr 20, 2026

    • security-insights

      Public
      Machine-readable specification for the attestation of security-relevant data.
      Go
      •
      Other
      •17•74•8•3•Updated Apr 17, 2026Apr 17, 2026

    • glossary

      Public
      A reference for common terms when talking about OpenSSF and open source software security.
      JavaScript
      •
      Apache License 2.0
      •6•4•4•1•Updated Apr 14, 2026Apr 14, 2026

    • secure-sw-dev-fundamentals

      Public
      Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
      CSS
      •
      Creative Commons Attribution 4.0 International
      •51•202•34•3•Updated Apr 10, 2026Apr 10, 2026

    • wg-securing-software-repos

      Public
      OpenSSF Working Group on Securing Software Repositories
      Other
      •30•127•10•4•Updated Apr 6, 2026Apr 6, 2026

    • wg-orbit

      Public
      ORBIT: Open Resources for Baselines, Interoperability, and Tooling
      Apache License 2.0
      •4•24•7•1•Updated Mar 19, 2026Mar 19, 2026

    • artwork

      Public
      OpenSSF Artwork
      Apache License 2.0
      •10•8•0•0•Updated Mar 17, 2026Mar 17, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.