Skip to content

@ossf Open Source Security Foundation (OpenSSF)

Change the repository type filter

All

    Repositories list

    79 repositories

    • scorecard-visualizer

      Public
      Tool for visualizing the Open SSF Scorecard Api data in a human friendly way
      openssfopenssf-scorecard
      openssfopenssf-scorecard
      TypeScript
      •
      Apache License 2.0
      •6•18•1•8•Updated Apr 26, 2026Apr 26, 2026

    • scorecard-action

      Public
      Official GitHub Action for OpenSSF Scorecard.
      githubsecuritysupply-chain
      githubsecuritysupply-chaingithub-actionsopenssf-scorecard
      Go
      •
      Apache License 2.0
      •84•374•30•13•Updated Apr 26, 2026Apr 26, 2026

    • malicious-packages

      Public
      A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
      Go
      •
      Apache License 2.0
      •86•495•21•5•Updated Apr 26, 2026Apr 26, 2026

    • oss-crs

      Public
      oss-crs
      Python
      •
      MIT License
      •6•56•26•6•Updated Apr 26, 2026Apr 26, 2026

    • scorecard-monitor

      Public
      Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts
      securitysecurity-auditsecurity-tools
      securitysecurity-auditsecurity-toolsgithub-actionsopen-source-managementopenssf-scorecard
      JavaScript
      •
      Apache License 2.0
      •14•48•14•4•Updated Apr 25, 2026Apr 25, 2026

    • ossf-landscape

      Public
      Apache License 2.0
      •28•31•0•4•Updated Apr 25, 2026Apr 25, 2026

    • security-baseline

      Public
      Go
      •
      Apache License 2.0
      •39•152•56•2•Updated Apr 24, 2026Apr 24, 2026

    • allstar

      Public
      GitHub App to set and enforce security policies
      Go
      •
      Apache License 2.0
      •145•1.4k•58•0•Updated Apr 24, 2026Apr 24, 2026

    • wg-best-practices-os-developers

      Public
      The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.
      JavaScript
      •
      Apache License 2.0
      •193•1k•82•12•Updated Apr 24, 2026Apr 24, 2026

    • cve-bin-tool

      Public
      The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl…
      pythonsecurityvulnerability
      pythonsecurityvulnerabilityvulnerabilitiescvehacktoberfestcvsssecurity-automationsecurity-toolsdevsecops
      Python
      •
      GNU General Public License v3.0
      •620•1.7k•147•52•Updated Apr 24, 2026Apr 24, 2026

    • osv-schema

      Public
      Open Source Vulnerability schema.
      Go
      •
      Apache License 2.0
      •116•246•49•6•Updated Apr 24, 2026Apr 24, 2026

    • scorecard

      Public
      OpenSSF Scorecard - Security health metrics for Open Source
      scorecardopenssf-scorecard
      scorecardopenssf-scorecard
      Go
      •
      Apache License 2.0
      •641•5.4k•366•26•Updated Apr 23, 2026Apr 23, 2026

    • pvtr-github-repo-scanner

      Public
      Privateer plugin for scanning the security hygiene of a GitHub repository.
      Go
      •
      Apache License 2.0
      •12•23•21•4•Updated Apr 22, 2026Apr 22, 2026

    • sig-basejump

      Public
      Python
      •
      Apache License 2.0
      •0•2•0•4•Updated Apr 21, 2026Apr 21, 2026

    • fuzz-introspector

      Public
      Fuzz Introspector -- introspect, extend and optimise fuzzers
      testingsecurityfuzzing
      testingsecurityfuzzingfuzz-testingvulnerability-analysissecurity-research
      Python
      •
      Apache License 2.0
      •85•453•109•10•Updated Apr 21, 2026Apr 21, 2026

    • wg-globalcyberpolicy

      Public
      Global Cyber Policy Working Group
      Apache License 2.0
      •20•112•16•0•Updated Apr 21, 2026Apr 21, 2026

    • si-tooling

      Public
      Python
      •
      Apache License 2.0
      •4•8•2•0•Updated Apr 21, 2026Apr 21, 2026

    • scorecard-webapp

      Public
      Website and API for OpenSSF Scorecard
      openssf-scorecard
      openssf-scorecard
      Go
      •
      Apache License 2.0
      •30•28•32•30•Updated Apr 20, 2026Apr 20, 2026

    • oss-vulnerability-guide

      Public
      A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disclosure notifications.
      Creative Commons Attribution 4.0 International
      •43•137•5•1•Updated Apr 20, 2026Apr 20, 2026

    • security-insights

      Public
      Machine-readable specification for the attestation of security-relevant data.
      Go
      •
      Other
      •16•74•8•2•Updated Apr 17, 2026Apr 17, 2026

    • glossary

      Public
      A reference for common terms when talking about OpenSSF and open source software security.
      JavaScript
      •
      Apache License 2.0
      •6•4•4•1•Updated Apr 14, 2026Apr 14, 2026

    • tac

      Public
      Technical Advisory Council
      Other
      •77•141•41•22•Updated Apr 14, 2026Apr 14, 2026

    • alpha-omega

      Public
      Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.
      securityopensourceopen-source-security
      securityopensourceopen-source-security
      Open Policy Agent
      •
      Apache License 2.0
      •63•125•0•1•Updated Apr 10, 2026Apr 10, 2026

    • secure-sw-dev-fundamentals

      Public
      Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)
      CSS
      •
      Creative Commons Attribution 4.0 International
      •51•202•34•3•Updated Apr 10, 2026Apr 10, 2026

    • wg-securing-software-repos

      Public
      OpenSSF Working Group on Securing Software Repositories
      Other
      •30•127•11•4•Updated Apr 6, 2026Apr 6, 2026

    • wg-orbit

      Public
      ORBIT: Open Resources for Baselines, Interoperability, and Tooling
      Apache License 2.0
      •4•24•7•1•Updated Mar 19, 2026Mar 19, 2026

    • artwork

      Public
      OpenSSF Artwork
      Apache License 2.0
      •10•8•0•0•Updated Mar 17, 2026Mar 17, 2026

    • toolbelt

      Public
      Apache License 2.0
      •6•26•0•0•Updated Mar 17, 2026Mar 17, 2026

    • orbit-launchpad

      Public
      Apache License 2.0
      •1•2•2•1•Updated Mar 8, 2026Mar 8, 2026

    • SIRT

      Public
      The OSS-SIRT SIG (Open Source Software Security Incident Response Team Special Interest Group) is a group working within the OSSF's Vulnerability Disclosure Wor…
      Apache License 2.0
      •6•10•2•1•Updated Mar 1, 2026Mar 1, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.