Open Source Security Foundation (OpenSSF)

OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all.

Open source software is pervasive in data centers, consumer devices, and applications. Because of its development process, the OSS that ultimately reaches end users has a chain of contributors and dependencies. 

Securing open source supply chains requires a combination of automated tooling, best practices, education, and collaboration. It is important that those responsible for their user or organization’s security are able to understand and verify the security of this dependency chain. 

Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.