Personas
These 6 personas cover the roles that most often touch the OpenSSF toolchain. Pick yours and you’ll see how every one of the 23 projects applies to your work.
Software Developer / Maintainer
Developer
You write and maintain the software. You need tools that shift security left — into local builds, pull-request checks, and everyday release hygiene — without slowing you down.
See their 14-tool guide
Open Source Professional (OSPO)
OSPO
You steward your organization's open source strategy. You need tools that let you set, enforce, and measure consistent security expectations across every project you touch.
See their 14-tool guide
Security Engineer / Architect
Security
You design and defend the systems around the software. You need tools that give you architectural visibility, threat-model traceability, and automated enforcement of security guarantees.
See their 14-tool guide
CI/CD DevOps & Tooling Integrator
DevOps
You own the pipelines that build, test, and ship code. You need tools that bolt cleanly into CI/CD, block unsafe dependencies, and produce verifiable artefacts at every stage.
See their 14-tool guide
Package & Repository Manager
Package Manager
You run the registries and repositories that serve software to the world. You need tools that surface trust signals to consumers and protect artefacts in flight.
See their 14-tool guide
Executive / End-User Consumer
Executive
You make procurement, compliance, and risk decisions on behalf of a larger organization. You need tools that translate supply-chain evidence into signals you can act on.
See their 14-tool guide