ossf / wg-metrics-and-metadataLinks
The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed confidence in the security of open source projects. We do this by collecting, curating, and communicating relevant metrics and metadata from open source projects and the ecosystems of which they are a part.
☆223Updated last year
Alternatives and similar repositories for wg-metrics-and-metadata
Users that are interested in wg-metrics-and-metadata are comparing it to the libraries listed below
Sorting:
- OpenSSF Security Tooling Working Group☆318Updated 4 months ago
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆203Updated last month
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆191Updated last year
- Technical Advisory Council☆132Updated 2 weeks ago
- Helping allocate resources to secure the critical open source projects we all depend on.☆377Updated 6 months ago
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated last year
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆207Updated 3 weeks ago
- Software Component Verification Standard (SCVS)☆150Updated 7 months ago
- ☆125Updated last week
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆196Updated 2 weeks ago
- OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…☆439Updated this week
- Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)☆197Updated 3 months ago
- OpenSSF Governance and Legal Docs☆73Updated 2 months ago
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆215Updated 5 months ago
- Generate a score for your sbom to understand if it will actually be useful.☆234Updated last year
- threatspec - continuous threat modeling, through code☆369Updated 4 years ago
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆130Updated 9 months ago
- Machine-readable specification for the attestation of security-relevant data.☆63Updated last month
- OpenVEX Specification☆161Updated 5 months ago
- OpenSSF Working Group on Securing Software Repositories☆122Updated last week
- ☆102Updated last year
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆105Updated 3 weeks ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆177Updated 11 months ago
- OpenSSF Endusers Working Group☆28Updated last year
- A community collection of security reviews of open source software components.☆95Updated last year
- A compilation of resources in the software supply chain security domain, with emphasis on open source☆334Updated 2 years ago
- Open Source Vulnerability schema.☆215Updated 2 weeks ago
- Working Group on Artificial Intelligence and Machine Learning (AI/ML) Security☆119Updated 3 weeks ago
- A standard API specification for exchanging supply chain artifacts and intelligence☆90Updated last week
- Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.☆110Updated last week