Blog

OpenSSF Scorecard Launches v4.12 with Support for GitLab

Today, we are excited to announce OpenSSF Scorecard v4.12. This release adds support for GitLab and brings the project closer to its longer-term goal of supporting all types of hosted repositories. Previously, Scorecard has been limited to GitHub-based repositories along with some support for local Git repositories. 

Join Us in Adopting the Open Source Consumption Manifesto

By adopting a few common principles, software organizations can achieve real, measurable change in the security and health of their software supply chains. You are invited to adopt the new Open Source Consumption Manifesto (OSCM) developed by the OpenSSF’s End Users Working Group and to sign the Manifesto by adding your name and submitting a…

OpenSSF Vulnerability Disclosures Working Group Helps Guide and Automate Handling Risk

The OpenSSF Vulnerability Disclosures Working Group aims to improve open source security by developing and advocating well-managed vulnerability reporting and communication. We do so by documenting and supporting best vulnerability disclosure and coordination practices and help share information on vulnerability information. The group is highly involved with the ecosystem and with the standards and tools…

OpenSSF Day Europe Agenda Now Live

The OpenSSF Day Europe agenda is now live! We will be hosting a full day of interesting session presentations, panels, and lightning talks on September 18th, colocated with Open Source Summit Europe in Bilbao, Spain. Plan to join us to discuss the latest and greatest in ongoing efforts to secure the open source software supply…