OSSF Security Tooling

Anyone is welcome to join our open discussions related to the group's mission and charter.

Objective

Our mission is to provide the best security tools for open source developers and make them universally accessible. We want to create a space where members can collaborate together to improve upon existing security tooling and develop new ones to suit the needs of the broader open source community.

Vision

Our vision is to improve the perception of security in open source software.

Governance

The CHARTER.md outlines the scope and governance of our group activities.

Communications

• Meeting Minutes
• Mailing list. Manage your subscriptions to Open SSF mailing lists.

Meeting times

Google Meet every other Tuesday at 16:00 GMT from Aug 11.

The meeting invite is available on the public OSSF calendar.

Active projects

CVE benchmarking initiative

• The CVE benchmarking initiative will be announced in detail at BlackHat Europe 2020. The talk will be presented by Bas van Schaik and Kevin Backhouse.

OSS Fuzzing

• OSS-Fuzz: Continuous fuzzing for open source software
• FuzzBench: Fuzzer Benchmarking As a Service

DAST scanning and web application definition

• Lead: Simon Bennetts
• Web Application Definition 1.0.0

CodeQL rules