Compliance

Working with open source projects can involve various compliance requirements, from license obligations to security standards and regulatory frameworks. This collection of tools and projects helps maintainers and organizations navigate compliance requirements.

The ORBIT Working Group (Open Resources for Baselines, Interoperability and Tooling) supports tools to implement and assess based on international best practices and regulations.

Projects

Gemara

A model for the categorical layers of activities related to automated governance.

Learn More

Minder

Proactively manage security posture by providing a set of checks and policies.

Learn More

OSPS Baseline

Structured security requirements aligned with international frameworks, standards, and regulations.

Learn More

Security Insights

Machine-processable project security information reporting.

Learn More

Working with open source projects can involve various compliance requirements, from license obligations to security standards and regulatory frameworks. This collection of tools and projects helps maintainers and organizations navigate compliance requirements.

Projects

Gemara

Minder

OSPS Baseline

Security Insights

We envision a future where OSS is universally trusted, secure, and reliable. Join us in making open source more secure.

Get the latest announcements, event info, and the community news in your inbox