Skip to content

@ossf Open Source Security Foundation (OpenSSF)

Change the repository type filter

All

    Repositories list

    79 repositories

    • oss-crs

      Public
      Cyber Reasoning Systems for Bug-Finding and Patching in Open Source Software
      Python
      •
      MIT License
      •14•94•25•6•Updated Jun 12, 2026Jun 12, 2026

    • scorecard-action

      Public
      Official GitHub Action for OpenSSF Scorecard.
      githubsecuritysupply-chain
      githubsecuritysupply-chaingithub-actionsopenssf-scorecard
      Go
      •
      Apache License 2.0
      •86•385•30•5•Updated Jun 12, 2026Jun 12, 2026

    • malicious-packages

      Public
      A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
      Go
      •
      Apache License 2.0
      •104•543•24•8•Updated Jun 12, 2026Jun 12, 2026

    • pvtr-github-repo-scanner

      Public
      Privateer plugin for scanning the security hygiene of a GitHub repository.
      Go
      •
      Apache License 2.0
      •14•28•34•2•Updated Jun 12, 2026Jun 12, 2026

    • scorecard-webapp

      Public
      Website and API for OpenSSF Scorecard
      openssf-scorecard
      openssf-scorecard
      Go
      •
      Apache License 2.0
      •30•28•33•34•Updated Jun 10, 2026Jun 10, 2026

    • cve-bin-tool

      Public
      The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl…
      pythonsecurityvulnerability
      pythonsecurityvulnerabilityvulnerabilitiescvehacktoberfestcvsssecurity-automationsecurity-toolsdevsecops
      Python
      •
      GNU General Public License v3.0
      •626•1.7k•150•55•Updated Jun 10, 2026Jun 10, 2026

    • tac

      Public
      Technical Advisory Council
      Other
      •82•145•40•13•Updated Jun 9, 2026Jun 9, 2026

    • osv-schema

      Public
      Open Source Vulnerability schema.
      Go
      •
      Apache License 2.0
      •118•252•51•11•Updated Jun 9, 2026Jun 9, 2026

    • scorecard-visualizer

      Public
      Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
      openssfopenssf-scorecard
      openssfopenssf-scorecard
      TypeScript
      •
      Apache License 2.0
      •7•19•1•19•Updated Jun 9, 2026Jun 9, 2026

    • security-baseline

      Public
      Go
      •
      Apache License 2.0
      •41•156•57•0•Updated Jun 9, 2026Jun 9, 2026

    • ossf-landscape

      Public
      Apache License 2.0
      •28•31•0•0•Updated Jun 9, 2026Jun 9, 2026

    • fuzz-introspector

      Public
      Fuzz Introspector -- introspect, extend and optimise fuzzers
      testingsecurityfuzzing
      testingsecurityfuzzingfuzz-testingvulnerability-analysissecurity-research
      Python
      •
      Apache License 2.0
      •86•458•109•12•Updated Jun 8, 2026Jun 8, 2026

    • allstar

      Public
      GitHub App to set and enforce security policies
      Go
      •
      Apache License 2.0
      •149•1.4k•58•7•Updated Jun 8, 2026Jun 8, 2026

    • scorecard

      Public
      OpenSSF Scorecard - Security health metrics for Open Source
      scorecardopenssf-scorecard
      scorecardopenssf-scorecard
      Go
      •
      Apache License 2.0
      •661•5.5k•373•45•Updated Jun 8, 2026Jun 8, 2026

    • education

      Public
      OpenSSF Education SIG
      Apache License 2.0
      •17•19•4•1•Updated Jun 6, 2026Jun 6, 2026

    • package-analysis

      Public
      Open Source Package Analysis
      Go
      •
      Apache License 2.0
      •71•894•65•13•Updated Jun 5, 2026Jun 5, 2026

    • SIRT

      Public
      The OSS-SIRT SIG (Open Source Software Security Incident Response Team) is a group working within the OSSF's Vulnerability Disclosure Working Group that is focu…
      Apache License 2.0
      •6•10•0•0•Updated Jun 5, 2026Jun 5, 2026

    • project-template

      Public template
      OpenSSF Project Template
      Apache License 2.0
      •11•23•1•2•Updated Jun 5, 2026Jun 5, 2026

    • alpha-omega

      Public
      Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
      securityopensourceopen-source-security
      securityopensourceopen-source-security
      Open Policy Agent
      •
      Apache License 2.0
      •65•131•0•0•Updated Jun 3, 2026Jun 3, 2026

    • si-tooling

      Public
      Python
      •
      Apache License 2.0
      •4•9•2•0•Updated Jun 3, 2026Jun 3, 2026

    • scorecard-monitor

      Public
      Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
      securitysecurity-auditsecurity-tools
      securitysecurity-auditsecurity-toolsgithub-actionsopen-source-managementopenssf-scorecard
      JavaScript
      •
      Apache License 2.0
      •15•48•14•6•Updated Jun 2, 2026Jun 2, 2026

    • package-feeds

      Public
      Feed parsing for language package manager updates
      Go
      •
      Apache License 2.0
      •19•86•21•12•Updated Jun 1, 2026Jun 1, 2026

    • gpu-hashlib

      Public
      Rust
      •
      Apache License 2.0
      •1•4•0•1•Updated May 29, 2026May 29, 2026

    • security-assessments

      Public
      Apache License 2.0
      •7•18•5•0•Updated May 28, 2026May 28, 2026

    • glossary

      Public
      A reference for common terms when talking about OpenSSF and open source software security.
      JavaScript
      •
      Apache License 2.0
      •7•4•4•4•Updated May 25, 2026May 25, 2026

    • secure-sw-dev-fundamentals

      Public
      Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
      CSS
      •
      Creative Commons Attribution 4.0 International
      •52•203•35•4•Updated May 22, 2026May 22, 2026

    • wg-best-practices-os-developers

      Public
      The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
      JavaScript
      •
      Apache License 2.0
      •201•1k•82•16•Updated May 20, 2026May 20, 2026

    • sig-basejump

      Public
      Python
      •
      Apache License 2.0
      •0•2•0•6•Updated May 19, 2026May 19, 2026

    • wg-bear

      Public
      The BEAR (Belonging, Empowerment, Allyship, and Representation) WG, formerly DEI, was formed in December 2023 to enhance representation and cybersecurity workfo…
      Apache License 2.0
      •7•13•10•2•Updated May 18, 2026May 18, 2026

    • model-signing-spec

      Public
      Model Signing Specification
      Python
      •
      Apache License 2.0
      •5•17•3•4•Updated May 15, 2026May 15, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.