Owner
ossf
27 indexed repositories · View on GitHub
-
scorecard
OpenSSF Scorecard - Security health metrics for Open Source
Go · 5697 stars
-
cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnera...
Python · 1765 stars
-
criticality_score
Gives criticality score for an open source project
Go · 1457 stars
-
allstar
GitHub App to set and enforce security policies
Go · 1453 stars
-
best-practices-badge
🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
Ruby · 1360 stars
-
wg-best-practices-os-developers
The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for ope...
JavaScript · 1067 stars
-
package-analysis
Open Source Package Analysis
Go · 912 stars
-
malicious-packages
A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit...
Go · 610 stars
-
scorecard-action
Official GitHub Action for OpenSSF Scorecard.
Go · 418 stars
-
osv-schema
Open Source Vulnerability schema.
Go · 271 stars
-
wg-supply-chain-integrity
Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the ...
208 stars
-
secure-sw-dev-fundamentals
Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
CSS · 206 stars
-
Go · 166 stars
-
oss-crs
Cyber Reasoning Systems for Bug-Finding and Patching in Open Source Software
Python · 158 stars
-
tac
Technical Advisory Council
152 stars
-
wg-globalcyberpolicy
Global Cyber Policy Working Group
126 stars
-
security-insights
Machine-readable specification for the attestation of security-relevant data.
Go · 80 stars
-
scorecard-webapp
Website and API for OpenSSF Scorecard
HTML · 33 stars
-
pvtr-github-repo-scanner
Privateer plugin for scanning the security hygiene of a GitHub repository.
Go · 31 stars
-
wg-orbit
ORBIT: Open Resources for Baselines, Interoperability, and Tooling
30 stars
- 7 more repositories live on View on GitHub
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/malicious-packages#1537 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
ossf/best-practices-badge#3036 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
Difficulty 3/5 1-2 days Newbie friendliness 72/100
ossf/wg-globalcyberpolicy#118 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
ossf/si-tooling#68 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
-
Bug: "All Levels" criteria page - Baseline unconditionally renders `{N/A justification} {Met URL}` Open
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
ossf/best-practices-badge#3017 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
ossf/scorecard-action#1705 ·
-
OSPS-QA-07.01: High confidence is unwarranted now that a bot approval can satisfy required approvals Open
Difficulty 3/5 1-2 days Newbie friendliness 66/100
ossf/pvtr-github-repo-scanner#481 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/best-practices-badge#3012 ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
ossf/model-signing-spec#16 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 76/100
-
Difficulty 4/5 3-5 days Newbie friendliness 62/100
ossf/cve-bin-tool#5909 · 1 comment ·
-
kind/enhancement
Difficulty 3/5 1-2 days Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
ossf/malicious-packages#1512 · 1 comment ·
-
Difficulty 3/5 1-2 days Newbie friendliness 65/100
ossf/scorecard-infra#103 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
ossf/scorecard-webapp#1046 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
ossf/wg-globalcyberpolicy#112 · 1 comment ·
-
Difficulty 1/5 Under an hour Newbie friendliness 88/100
ossf/wg-globalcyberpolicy#111 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
ossf/cve-bin-tool#5907 ·
-
bug
Difficulty 3/5 1-2 days Newbie friendliness 48/100
ossf/cve-bin-tool#5906 · 1 comment ·
-
kind/bug
Difficulty 3/5 1-2 days Newbie friendliness 66/100
-
Proposal: concentration-weighted dependency metric (conemass) for the quiet/low-activity blind spot Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
ossf/criticality_score#836 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
ossf/cve-bin-tool#5904 ·
-
mkashif02 Open
Difficulty 5/5 Over a week Newbie friendliness 1/100
ossf/osv-schema#604 ·
-
enhancement
Difficulty 5/5 Over a week Newbie friendliness 35/100
ossf/cve-bin-tool#5902 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/scorecard-infra#84 · 6 comments ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
ossf/wg-globalcyberpolicy#110 ·
-
bug
Difficulty 3/5 1-2 days Newbie friendliness 68/100
ossf/cve-bin-tool#5896 ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
-
Difficulty 3/5 1-2 days Newbie friendliness 75/100
ossf/security-baseline#551 ·
-
ossf/scorecard-infra#77 · 1 assignee ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
ossf/scorecard-infra#75 ·
-
ossf/scorecard#5208 · 9 comments · 9 reactions · 4 assignees ·
-
Difficulty 3/5 1-2 days Newbie friendliness 55/100
ossf/scorecard-infra#73 ·
-
ossf/scorecard-infra#72 · 1 assignee ·
-
AA Open
Difficulty 5/5 Over a week Newbie friendliness 1/100
ossf/criticality_score#835 ·
-
needs triage
Difficulty 4/5 3-5 days Newbie friendliness 45/100
-
needs triage
Difficulty 4/5 3-5 days Newbie friendliness 68/100
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
ossf/security-baseline#546 ·
-
Request to update MAL-2026-13416: affected versions are limited to 0.1.0-beta through 0.1.7-beta Open
Difficulty 3/5 1-2 days Newbie friendliness 65/100
ossf/malicious-packages#1474 · 4 comments ·
-
needs triage
Difficulty 3/5 1-2 days Newbie friendliness 65/100
-
Product: Python Hardening Guide
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
ossf/model-signing-spec#14 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
ossf/model-signing-spec#13 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
ossf/scorecard-webapp#1030 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 25/100
ossf/criticality_score#833 · 1 comment ·
Showing the newest 100
This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.