Open Source Security Foundation

The OpenSSF is a foundation under the umbrella of the Linux Foundation that aims to improve the security of open-source software. It hosts, among others, the Open Source Vulnerabilities (OSV) format for vulnerability data, the Scorecard rating of projects and Sigstore for signed software. For software supply chains it is one of the most important points of reference.