The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed confidence in the security of open source projects. We do this by collecting, curating, and communicating relevant metrics and metadata from open source projects and the ecosystems of which they are a part.
☆223Apr 23, 2024Updated 2 years ago
Alternatives and similar repositories for wg-metrics-and-metadata
Users that are interested in wg-metrics-and-metadata are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OpenSSF Security Tooling Working Group☆323Jul 6, 2025Updated 10 months ago
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆220Feb 4, 2026Updated 3 months ago
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆206Jan 15, 2026Updated 4 months ago
- Helping allocate resources to secure the critical open source projects we all depend on.☆397May 8, 2025Updated last year
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Mar 13, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for ope…☆1,026May 20, 2026Updated last week
- Technical Advisory Council☆144Updated this week
- A community collection of security reviews of open source software components.☆99Feb 29, 2024Updated 2 years ago
- OpenSSF Governance and Legal Docs☆75Sep 9, 2025Updated 8 months ago
- OpenSSF Endusers Working Group☆28Mar 21, 2024Updated 2 years ago
- OpenSSF Working Group on Securing Software Repositories☆128Apr 6, 2026Updated last month
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆137Apr 20, 2026Updated last month
- ☆26Mar 17, 2026Updated 2 months ago
- ☆41Jul 9, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- OpenSSF Scorecard - Security health metrics for Open Source☆5,455May 19, 2026Updated last week
- Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)☆203May 22, 2026Updated last week
- AIBOM Workshop RSA 2024☆15May 20, 2024Updated 2 years ago
- Supply-chain Levels for Software Artifacts☆1,871May 18, 2026Updated last week
- OpenSSF Project Template☆22Nov 29, 2023Updated 2 years ago
- Software Component Verification Standard (SCVS)☆158Apr 1, 2025Updated last year
- QSOS repository (Method, Formats, Tools)☆27Feb 12, 2024Updated 2 years ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆533Updated this week
- Collection of security best practices for package managers.☆164Sep 26, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Kilt is a project that defines how to inject foreign apps into containers☆13Dec 15, 2023Updated 2 years ago
- Scan GitHub Actions Workflow logs for IOCs☆17May 18, 2026Updated last week
- Quantitate binary risk assessment☆17May 9, 2022Updated 4 years ago
- GitHub App to set and enforce security policies☆1,424Updated this week
- Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security☆169May 1, 2026Updated 3 weeks ago
- THOR APT Scanner User Manual☆22May 22, 2026Updated last week
- Monitors Github for leaked secrets☆206Oct 25, 2024Updated last year
- Open Source Package Analysis☆887May 22, 2026Updated last week
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆144Oct 5, 2023Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Software Supply Chain Transparency Log☆1,147Updated this week
- Sigstore OIDC PKI☆843Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆114Feb 28, 2026Updated 3 months ago
- Gives criticality score for an open source project☆1,429Dec 2, 2025Updated 5 months ago
- ☆45Aug 26, 2025Updated 9 months ago
- This is a POC repository showing how a Kubernetes Admission Controller can be made irrelevant when verifying container image signatures☆12Dec 21, 2022Updated 3 years ago
- Evangelizing the mission and work of the OpenSSF and building strong community outreach around end-users, open-source maintainers, and co…☆25May 2, 2024Updated 2 years ago