All

80 repositories

best-practices-badge
Public
🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
rails open-source security
rails open-source security best-practices foss supply-chain badge floss ossf openssf
Ruby
•
MIT License
•233•1.4k•213•9•Updated Aug 9, 2026Aug 9, 2026
malicious-packages
Public
A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
Go
•
Apache License 2.0
•128•593•29•10•Updated Aug 9, 2026Aug 9, 2026
pvtr-github-repo-scanner
Public
Privateer plugin for scanning the security hygiene of a GitHub repository.
Go
•
Apache License 2.0
•17•30•30•6•Updated Aug 9, 2026Aug 9, 2026
scorecard-webapp
Public
Website and API for OpenSSF Scorecard
openssf-scorecard
openssf-scorecard
Go
•
Apache License 2.0
•31•31•33•10•Updated Aug 9, 2026Aug 9, 2026
oss-crs
Public
Cyber Reasoning Systems for Bug-Finding and Patching in Open Source Software
Python
•
MIT License
•22•137•30•11•Updated Aug 9, 2026Aug 9, 2026
scorecard
Public
OpenSSF Scorecard - Security health metrics for Open Source
scorecard openssf-scorecard
scorecard openssf-scorecard
Go
•
Apache License 2.0
•697•5.6k•381•51•Updated Aug 9, 2026Aug 9, 2026
scorecard-action
Public
Official GitHub Action for OpenSSF Scorecard.
github security supply-chain
github security supply-chain github-actions openssf-scorecard
Go
•
Apache License 2.0
•86•403•33•3•Updated Aug 8, 2026Aug 8, 2026
oss-crs-actions
Public
Shell
•0•1•0•0•Updated Aug 7, 2026Aug 7, 2026
package-analysis
Public
Open Source Package Analysis
Go
•
Apache License 2.0
•73•903•65•18•Updated Aug 7, 2026Aug 7, 2026
ossf-landscape
Public
Apache License 2.0
•29•32•0•0•Updated Aug 7, 2026Aug 7, 2026
wg-best-practices-os-developers
Public
The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
JavaScript
•
Apache License 2.0
•204•1.1k•77•14•Updated Aug 6, 2026Aug 6, 2026
osv-schema
Public
Open Source Vulnerability schema.
Go
•
Apache License 2.0
•122•266•51•7•Updated Aug 6, 2026Aug 6, 2026
tac
Public
Technical Advisory Council
Other
•84•150•46•21•Updated Aug 5, 2026Aug 5, 2026
cve-bin-tool
Public
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl…
python security vulnerability
python security vulnerability vulnerabilities cve hacktoberfest cvss security-automation security-tools devsecops
Python
•
GNU General Public License v3.0
•645•1.7k•150•71•Updated Aug 5, 2026Aug 5, 2026
security-baseline
Public
Go
•
Apache License 2.0
•43•160•53•4•Updated Aug 4, 2026Aug 4, 2026
glossary
Public
A reference for common terms when talking about OpenSSF and open source software security.
JavaScript
•
Apache License 2.0
•8•6•3•3•Updated Aug 3, 2026Aug 3, 2026
allstar
Public
GitHub App to set and enforce security policies
Go
•
Apache License 2.0
•147•1.4k•58•2•Updated Aug 2, 2026Aug 2, 2026
alpha-omega
Public
Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
security opensource open-source-security
security opensource open-source-security
Open Policy Agent
•
Apache License 2.0
•67•137•0•0•Updated Jul 31, 2026Jul 31, 2026
wg-globalcyberpolicy
Public
Global Cyber Policy Working Group
Apache License 2.0
•22•122•12•1•Updated Jul 31, 2026Jul 31, 2026
scorecard-visualizer
Public
Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
openssf openssf-scorecard
openssf openssf-scorecard
TypeScript
•
Apache License 2.0
•8•20•1•22•Updated Jul 28, 2026Jul 28, 2026
security-insights
Public
Machine-readable specification for the attestation of security-relevant data.
Go
•
Other
•19•81•8•3•Updated Jul 27, 2026Jul 27, 2026
community
Public
HTML
•
Creative Commons Attribution 4.0 International
•8•10•2•5•Updated Jul 27, 2026Jul 27, 2026
scorecard-monitor
Public
Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
security security-audit security-tools
security security-audit security-tools github-actions open-source-management openssf-scorecard
JavaScript
•
Apache License 2.0
•16•49•14•8•Updated Jul 25, 2026Jul 25, 2026
education
Public
OpenSSF Education SIG
Apache License 2.0
•17•20•4•5•Updated Jul 24, 2026Jul 24, 2026
SIRT
Public
The OSS-SIRT SIG (Open Source Software Security Incident Response Team) is a group working within the OSSF's Vulnerability Disclosure Working Group that is focu…
Apache License 2.0
•6•10•0•4•Updated Jul 24, 2026Jul 24, 2026
si-tooling
Public
Python
•
Apache License 2.0
•4•9•2•0•Updated Jul 20, 2026Jul 20, 2026
wg-orbit
Public
ORBIT: Open Resources for Baselines, Interoperability, and Tooling
Apache License 2.0
•5•29•5•1•Updated Jul 16, 2026Jul 16, 2026
secure-sw-dev-fundamentals
Public
Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
CSS
•
Creative Commons Attribution 4.0 International
•53•205•35•5•Updated Jul 15, 2026Jul 15, 2026
fuzz-introspector
Public
Fuzz Introspector -- introspect, extend and optimise fuzzers
testing security fuzzing
testing security fuzzing fuzz-testing vulnerability-analysis security-research
Python
•
Apache License 2.0
•87•465•109•18•Updated Jul 10, 2026Jul 10, 2026
project-template
Public template
OpenSSF Project Template
Apache License 2.0
•11•23•1•2•Updated Jun 5, 2026Jun 5, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

All

All

Repositories list

80 repositories