security
OpenSSF
Open Source Security Foundation
Definition
The OpenSSF is a Linux Foundation project that brings together industry leaders to improve the security of open-source software. It hosts projects like Scorecard (security health metrics), Alpha-Omega (targeted vulnerability research), and the Sigstore signing infrastructure.
OpenSSF also maintains best practices badging and security training resources for OSS maintainers.
Can this ship? Are we exposed? Can you prove it?
Every CISO is asking these three questions. We answer them with facts, not guesses, from repository to runtime.