Project Community

Home Personas Problems Projects Publications About

Quick Links

Browse by Persona

Software Developer / Maintainer Open Source Professional (OSPO)Security Engineer / Architect CI/CD DevOps & Tooling Integrator Package & Repository Manager Executive / End-User Consumer

Browse by Problem

Build & Provenance Integrity Artefact Signing & Verification Dependency & SBOM Visibility Vulnerability Management Secure Repository Configuration Measuring Security Posture Policy & Compliance Enforcement Secrets Management

Browse by Project

Best Practices Badge Bomctl Criticality Score Fuzz Introspector FuzzingBrain Gemara gittuf GUAC in-toto Minder OpenSSF Model Signing (OMS)OpenBao OpenSSF Scorecard OSS-CRS Package Analysis Protobom / SBOM Tools Repository Service for TUF (RSTUF)SBOMit Secure Agentic Framework Sigstore slsa-github-generator slsa-verifier Zarf

Browse by Publication

Gemara Whitepaper in-toto Attestation OSPS Baseline OSV Schema & OpenVEX OSV Record (vulnerability record format)SARIF Software Bill of Materials Security Insights SLSA SLSA Provenance Vulnerability Exploitability eXchange

OpenSSF project

FuzzingBrain

An OSSF project approved by the TAC and currently in LF legal formation; public documentation is not yet available, so scope and classification are provisional.

All projects Start over

OpenSSF contributors
operations@openssf.org

Browse OpenSSF projects by the role you play. Every project is mapped to the personas it serves and the problems it solves, with a one-sentence, role-specific usage guide for each.

Copyright © OpenSSF contributors, a Series of LF Projects, LLC. For website terms of use, trademark policy, and other project policies please see https://lfprojects.org. This site is open source. View or contribute at GitHub.