finos-labs / osmm
Open Source Maturity Model
☆15Updated 9 months ago
Alternatives and similar repositories for osmm:
Users that are interested in osmm are comparing it to the libraries listed below
- OpenSSF Endusers Working Group☆28Updated 11 months ago
- ☆18Updated 8 months ago
- OSPO Landscape☆33Updated 2 weeks ago
- A CLI tool for creating secure by design/default source repos.☆25Updated 6 months ago
- Potential WG on Artificial Intelligence and Machine Learning (AI/ML)☆61Updated 3 months ago
- Check SPDX SBOM for NTIA minimum elements☆59Updated 2 weeks ago
- A collection of guidelines and resources from Citi's Open Source Program Office☆48Updated 10 months ago
- Materials for the ISPO working group☆23Updated this week
- Accelerate financial services firms’ journeys toward open source readiness, by advancing the readiness of participants’ firms and informi…☆37Updated this week
- Visualizer for GUAC☆28Updated 3 weeks ago
- ☆60Updated 7 months ago
- OPENSSF SECURITY INSIGHTS: Repository for development of the draft standard, where requests for modification should be made via Github Is…☆56Updated last month
- FINOS Common Cloud Controls☆42Updated this week
- OpenVEX Specification☆141Updated 7 months ago
- This repo is for tracking activities that we work on during TODO Group Work Days☆15Updated 2 years ago
- SBOM Assembler - A tool to edit SBOM or assemble multiple sboms into a single sbom.☆62Updated this week
- Templates and commandline tools for creating repositories for US Federal open source projects☆26Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆78Updated last week
- ☆100Updated 4 months ago
- Vuln Disclosure WG's new SIG☆11Updated last year
- Technical Advisory Council☆116Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆225Updated 6 months ago
- Open Source Program Office Definition (OSPOD)☆136Updated 7 months ago
- in-toto is a framework to secure the software supply chain.☆70Updated last month
- Examples of SPDX files for software combinations☆127Updated 3 weeks ago
- ☆23Updated 3 years ago
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆49Updated last week
- Example CLI project to demo API architecture and protobom library☆20Updated this week
- A light-weight app to audit and inventory large codebases for open source license compliance.☆61Updated this week
- Automating Compliance Tooling Project☆20Updated 3 years ago