-
security-baseline Public
Forked from ossf/security-baselineGo Apache License 2.0 UpdatedNov 29, 2024 -
-
security-insights-spec Public
Forked from ossf/security-insights-specOPENSSF SECURITY INSIGHTS: Repository for development of the draft standard, where requests for modification should be made via Github Issues.
Other UpdatedSep 26, 2024 -
-
wg-securing-critical-projects Public
Forked from ossf/wg-securing-critical-projectsHelping allocate resources to secure the critical open source projects we all depend on.
Apache License 2.0 UpdatedAug 1, 2024 -
flawfinder Public
a static analysis tool for finding vulnerabilities in C/C++ source code
-
wg-best-practices-os-developers Public
Forked from ossf/wg-best-practices-os-developersOSSF Working group: secure code best practices for open source developers
JavaScript UpdatedMay 31, 2024 -
-
metamath-test Public
Test metamath verification implementations
-
spdx-tutorial Public
A brief tutorial on how to use Software Package Data Exchange (SPDX)
-
-
scorecard-action Public
Forked from ossf/scorecard-actionOfficial GitHub Action for OpenSSF Scorecard.
Go Apache License 2.0 UpdatedSep 5, 2023 -
omega-triage-portal Public
Forked from ossf/omega-triage-portalPython MIT License UpdatedAug 28, 2023 -
fulcio Public
Forked from sigstore/fulcioSigstore OIDC PKI
Go Apache License 2.0 UpdatedAug 23, 2023 -
sigstore-python Public
Forked from sigstore/sigstore-pythonA codesigning tool for Python packages
Python Other UpdatedAug 23, 2023 -
rekor Public
Forked from sigstore/rekorSoftware Supply Chain Transparency Log
Go Apache License 2.0 UpdatedAug 23, 2023 -
cosign Public
Forked from sigstore/cosignContainer Signing
Go Apache License 2.0 UpdatedAug 23, 2023 -
scorecard Public
Forked from ossf/scorecardSecurity Scorecards - Security health metrics for Open Source
Go Apache License 2.0 UpdatedAug 21, 2023 -
security-reviews Public
Forked from ossf/security-reviewsA community collection of security reviews of open source software components.
-
OSSGadget Public
Forked from microsoft/OSSGadgetCollection of tools for analyzing open source packages.
C# MIT License UpdatedMay 26, 2023 -
oss-vulnerability-guide Public
Forked from ossf/oss-vulnerability-guideA guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disclosure notifications.
-
-
forallx-yyc Public
Forked from rzach/forallx-yycUCalgary version of forallx, an introduction to formal logic
TeX Creative Commons Attribution 4.0 International UpdatedJan 22, 2023 -
plot-stars Public
Plot nearby stars, e.g., for Project Hail Mary
-
railroader Public
A static analysis security vulnerability scanner for Ruby on Rails applications (OSS fork of Brakeman)
-
-
CheatSheetSeries Public
Forked from OWASP/CheatSheetSeriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Python Other UpdatedOct 17, 2022 -
make-audit Public
Easy-to-use tool for auditing Makefiles for errors
-
make-booster Public
Utility routines to simplify using GNU make and Python
-
www-dwheeler-com Public
Repository representing alias www.dwheeler.com, NOT main dwheeler.com site
UpdatedJul 10, 2022
{{ message }}