ossf/secure-sw-dev-fundamentals

View on GitHub

Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)

Stars: 206
Forks: 52
Open beginner issues: 0
Indexed issues: 35
Avg merge: 2m
Merged PRs (30d): 1

Dominant language: CSS
License: CC-BY-4.0
Last GitHub push: Aug 21, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

35 open issues indexed

Wrong link to iapp.org Open

Difficulty 1/5 Under an hour Newbie friendliness 85/100

ossf/secure-sw-dev-fundamentals#204 · Opened Jun 7, 2026
Add reference to EU CRA, especially annex I Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#184 · Opened Dec 12, 2024
Add new lab for arguments Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#175 · Opened Oct 7, 2024
Including EPSS in addition to CVSS? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#161 · Opened Jul 30, 2024
Add discussion on peer review and signing Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

ossf/secure-sw-dev-fundamentals#146 · Opened Nov 29, 2023
Example(s) for "You should instead have a plan for handling when (not if) your cryptographic algorithms and protocols are broken."? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#140 · Opened Aug 26, 2023
Embedded software: Add firmware info, make it clear it applies Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#135 · 1 comment · Opened Jul 26, 2023
Provide alternatives for telling the user that "an account with that email address already exists" during signup Open

Difficulty 3/5 1-2 days Newbie friendliness 30/100

ossf/secure-sw-dev-fundamentals#134 · 2 comments · Opened Jul 26, 2023
Note SHA-256 length extension attack, HMAC, replay attacks Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#128 · 1 comment · Opened May 25, 2023
Regex ReDos test answer is incomplete/incorrect Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

ossf/secure-sw-dev-fundamentals#127 · Opened May 9, 2023
Generate a PDF for a book Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#115 · 3 comments · Opened Jan 26, 2023
Create video introductions for chapters Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#110 · Opened Nov 22, 2022
Extend fundamentals course to discuss build/distribution security Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

ossf/secure-sw-dev-fundamentals#90 · Opened Oct 11, 2022
Review/respond to LFD121 feedback Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#83 · Opened Aug 23, 2022
Can I write a sentence about offensive security engineers? Open

Difficulty 1/5 Under an hour Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#75 · 3 comments · Opened Jun 28, 2022
Does this refer to user permissions? Open

Difficulty 2/5 1-3 hours Newbie friendliness 30/100

ossf/secure-sw-dev-fundamentals#74 · 1 comment · Opened Jun 28, 2022
Italicize titles Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

ossf/secure-sw-dev-fundamentals#73 · 1 comment · Opened Jun 28, 2022
Add Cycode's GitHub Actions Vulnerabilities example Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

ossf/secure-sw-dev-fundamentals#72 · Opened Jun 24, 2022
Create clarifying images using DALL-E-2 Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#71 · 1 comment · Opened Jun 24, 2022
Review to ensure coverage to Secure Code Warrior survey knowledge Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#70 · Opened Jun 24, 2022
Growl npm module as STORY TIME? Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#69 · Opened Jun 2, 2022
Consider adding XBox password as STORY TIME Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#68 · Opened Jun 2, 2022
Cite the resources on lines 431 through 441 Open

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

ossf/secure-sw-dev-fundamentals#56 · Opened May 15, 2022
CIA triad image looks like regular triangle on dark mode Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

ossf/secure-sw-dev-fundamentals#39 · Opened Apr 30, 2022
Regex example is incorrect Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

ossf/secure-sw-dev-fundamentals#36 · 1 comment · Opened Apr 19, 2022
Define trusted / untrusted sooner Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#27 · Opened Mar 29, 2022
Review NICE Framework (NIST) Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#14 · Opened Nov 16, 2021
Discuss browser-side sanitizer API Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#13 · Opened Oct 20, 2021
Add more about container security best practices Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#12 · Opened Oct 14, 2021
Define 0-day Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#11 · Opened Sep 30, 2021
Add more code examples (wrong/right) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#9 · Opened Sep 10, 2021
Add more vignettes (STORY TIME) Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ossf/secure-sw-dev-fundamentals#8 · Opened Sep 10, 2021
Review Software Assurance Curriculum Project Volume II Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

ossf/secure-sw-dev-fundamentals#5 · Opened Jun 4, 2021
Add/extend course information Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

ossf/secure-sw-dev-fundamentals#2 · Opened Dec 11, 2020
OpenSecurityTraining: Cross-connections to exploitation curricula Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

ossf/secure-sw-dev-fundamentals#1 · Opened Dec 11, 2020

ossf/secure-sw-dev-fundamentals

Get new issues in your inbox