Welcome to the page of Security Insights Spec! All information regarding the maintenance, security, and consumption of the Security Insights Specification can be found in this repo within the latest version of the official specification file.
Don’t forget to join us on Slack, and visit the OpenSSF Working Group responsible for maintaining this spec, Identifying Security Threats in Open Source Projects.